Privacy / Data Protection Analyst, III

University of Utah; Salt Lake City (UT); On-site; USD 50,000 - 93,000; Full time

Job summary

Huntsman Cancer Institute (HCI) at the University of Utah is seeking a Privacy / Data Protection Analyst III to develop and maintain policies aligning with modern privacy and cybersecurity frameworks. The role involves identifying gaps, coordinating with UPDB and university departments, and educating faculty, staff, and students on privacy best practices.

Join the UPDB Shared Resource team and collaborate with HCI-IT, the ISO, and the IPO to define risks, drive solutions, monitor compliance, and

Qualifications

• Bachelor's degree (or equivalent) plus 6 years directly related work experience
• Experience with privacy laws and regulatory frameworks
• Ability to educate non-technical audiences about privacy topics
• Strong analytical and communication skills

Responsibilities

• Development and implementation of a comprehensive Privacy Program for UPDB.
• Tracking compliance status within security and privacy frameworks.
• Keeping current with developments in data privacy standards and risks.
• Compliance evidence management.
• Continuous cybersecurity and privacy compliance monitoring support.
• Remediation tracking.
• Coordinating with internal and external security and privacy stakeholders.
• Educating colleagues about data privacy best practices.
• Other cybersecurity and system administration duties as assigned.

Skills

Privacy regulations

Cybersecurity

Risk assessment

Training/education

Education

Bachelor's degree or equivalent

Job description

Privacy / Data Protection Analyst, III

Job Summary

Huntsman Cancer Institute (HCI) at the University of Utah(“University”) is looking for an experienced Privacy/DataProtection Analyst to assist in developing and maintaining policies and procedures that meet modern data privacy and cybersecurity frameworks. This individual will be responsible for anticipating and identifying gaps with respect to established frameworks and working with HCI and University departments to resolve or remediate them. This person will join Utah Population Database (UPDB) Shared Resource group, which is one of the world's richest sources of in-depth information that supports research on genetics, epidemiology, demography, and public health. In addition to working with the existing UPDB cybersecurity team, they will coordinate with other privacy and cybersecurity entities at HCI and the University, including: HCI Information Technology group (HCI-IT), the Information Security Office (ISO), and the Information Privacy Office (IPO). To be successful in this position, applicants should have expert analytical skills and in-depth knowledge of best practices in cybersecurity and data privacy. The Privacy/Data Protection Analyst III will also need excellent communication skills to train and educate faculty, staff and students about various information privacy and cybersecurity topics, to define risks and possible solutions for HCI and University leadership, and to serve as a liaison with external stakeholders about privacy and information security issues.

Huntsman Cancer Institute is committed to cancer prevention, care, and survivorship for all communities within the area we serve– which includes Idaho, Montana, Nevada, Utah, and Wyoming – with impact worldwide.

Learn more about the great benefits of working for University of Utah: benefits.utah.edu The department may choose to hire at any of the below joblevels and associated pay rates based on their business need and budget.

Responsibilities

• Development and implementation of a comprehensive Privacy Program for UPDB.
• Tracking compliance status within the organization's security and privacy frameworks.
• Keeping current with developments in data privacy standards and risks.
• Compliance evidence management.
• Continuous cybersecurity and privacy compliance monitoring support.
• Remediation tracking.
• Coordinating with internal and external security and privacy stakeholders.
• Educating colleagues about data privacy best practices.
• Other cybersecurity and system administration duties as assigned.

Privacy / Data Protection Analyst, III Monitor, analyze, and report organizational compliance with internal policies and external government regulations regarding personal data and privacy laws (e.g., GDPR for the European Union). Administer and update privacy guidelines and investigate non-compliance of privacy policies and regulations. Ensure business assets containing personal data are identified. Conduct audits to ensure compliance and address potential issues proactively. Manage and respond to privacy breach incidences. Cooperate with supervisory authorities as necessary. Evaluate and recommend improvements for privacy controls and procedures. Assist in the development of privacy training to facilitate and promote information privacy awareness within the company and related entities. Considered highly skilled and proficient in discipline. Conducts complex, important work under minimal supervision and with wide latitude for independent judgment.

This is a Career-Level position in the General Professional track.

Minimum Qualifications

EQUIVALENCY STATEMENT: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor's degree = 4 years of directly related work experience).

Department may hire employee at one of the following joblevels: Privacy / Data Protection Analyst, III: Requires a bachelor's (or equivalency) + 6 years or a master's (or equivalency) + 4 years of directly related work experience.

Preferences

• Experience with security frameworks such as NIST 800-171 or NIST 800-53.
• Experience with Utah Government Data Privacy Act (GDPA).
• Information security certification(s).
• General understanding of security operations and technical controls.
• Exposure to data privacy or data governance requirements.
• Excellent problem-solving and analytical skills.
• Ability to educate a non-technical audience about domain-specific topics.
• Effective verbal and written communication skills.

Requisition Number: PRN46085B

Full Time or Part Time?: Full Time

Work Schedule Summary:

Department: 01240 - HCI Pedigree & Popul Sci Dept

Location: Campus

Pay Rate Range: 50,000 to 93,000

Close Date: 11/30/2026

Open Until Filled: