Privacy / Data Protection Analyst, III

University of Utah Health; Salt Lake City (UT); On-site; USD 50,000 - 93,000; Full time

Job summary

University of Utah Health's Huntsman Cancer Institute (HCI) in Salt Lake City seeks an experienced Privacy/Data Protection Analyst to develop and maintain policies meeting data privacy and cybersecurity frameworks. The role identifies gaps and collaborates with UPDB Shared Resource group and HCI/University teams to remediate them.

Applicants should have expert analytical skills and deep knowledge of privacy and cybersecurity practices, with the ability to train faculty, staff and students and to

Qualifications

• Bachelor’s degree (or equivalent) + 6 years related experience, or Master’s degree + 4 years.
• 1 year of higher education can be substituted for 1 year of directly related work experience.
• Career-Level position: Privacy/Data Protection Analyst III within General Professional track.

Responsibilities

• Develop and implement a comprehensive Privacy Program for UPDB.
• Track compliance within the organization’s security and privacy frameworks.
• Keep current with developments in data privacy standards and risks.
• Compliance evidence management.
• Continuous cybersecurity and privacy compliance monitoring support.
• Remediation tracking.
• Coordinating with internal and external security and privacy stakeholders.
• Educating colleagues about data privacy best practices.
• Other cybersecurity and system administration duties as assigned.

Skills

NIST frameworks

Security certs

Security operations

GDPR/GDPA knowledge

Problem solving

Communication skills

Training others

Education

Bachelor's degree or equivalent

Master's degree or equivalent

Job description

Details

Open Date

Requisition Number

PRN46085B

Job Title

Privacy / Data Protection Analysts

Working Title

Privacy / Data Protection Analyst, III

Career Progression Track

P00

Track Level

P3 - Career

FLSA Code

Professional

Patient Sensitive Job Code?

No

Standard Hours per Week

40

Full Time or Part Time?

Full Time

Shift

Day

VP Area

President

Department

01240 - HCI Pedigree & Popul Sci Dept

Location

Campus

City

Salt Lake City, UT

Type of Recruitment

External Posting

Pay Rate Range

50,000 to 93,000

Close Date

11/30/2026

Job Summary

Huntsman Cancer Institute ( HCI ) at the University of Utah(“University”) is looking for an experienced Privacy/Data Protection Analyst to assist in developing and maintaining policies and procedures that meet modern data privacy and cybersecurity frameworks. This individual will be responsible for anticipating and identifying gaps with respect to established frameworks and working with HCI and University departments to resolve or remediate them.

This person will join Utah Population Database ( UPDB ) Shared Resource group, which is one of the world’s richest sources of in-depth information that supports research on genetics, epidemiology, demography, and public health. In addition to working with the existing UPDB cybersecurity team, they will coordinate with other privacy and cybersecurity entities at HCI and the University, including: HCI Information Technology group ( HCI -IT), the Information Security Office ( ISO ), and the Information Privacy Office ( IPO ).

To be successful in this position, applicants should have expert analytical skills and in-depth knowledge of best practices in cybersecurity and data privacy. The Privacy/Data Protection Analyst III will also need excellent communication skills to train and educate faculty, staff and students about various information privacy and cybersecurity topics, to define risks and possible solutions for HCI and University leadership, and to serve as a liaison with external stakeholders about privacy and information security issues.

Huntsman Cancer Institute is committed to cancer prevention, care, and survivorship for all communities within the area we serve – which includes Idaho, Montana, Nevada, Utah, and Wyoming – with impact worldwide.

In your cover letter or during your interview process, we invite you to share how your professional experiences have prepared you to serve as a member of our team as we work to reduce the cancer burden experienced by all people and communities. This may include description of your prior experiences related to research, prevention, clinical care, community engagement/outreach, training, administration, or other areas relevant to Huntsman Cancer Institute’s mission and this position.

Learn more about the great benefits of working for University of Utah: benefits.utah.edu

The department may choose to hire at any of the below job levels and associated pay rates based on their business need and budget.

Responsibilities

• Development and implementation of a comprehensive Privacy Program for UPDB .
• Tracking compliance status within the organization’s security and privacy frameworks.
• Keeping current with developments in data privacy standards and risks.
• Compliance evidence management.
• Continuous cybersecurity and privacy compliance monitoring support.
• Remediation tracking.
• Coordinating with internal and external security and privacy stakeholders.
• Educating colleagues about data privacy best practices.
• Other cybersecurity and system administration duties as assigned.

Privacy / Data Protection Analyst, III

Monitor, analyze, and report organizational compliance with internal policies and external government regulations regarding personal data and privacy laws (e.g., GDPR for the European Union). Administer and update privacy guidelines and investigate non-compliance of privacy policies and regulations. Ensure business assets containing personal data are identified. Conduct audits to ensure compliance and address potential issues proactively. Manage and respond to privacy breach incidences. Cooperate with supervisory authorities as necessary. Evaluate and recommend improvements for privacy controls and procedures. Assist in the development of privacy training to facilitate and promote information privacy awareness within the company and related entities. Considered highly skilled and proficient in discipline. Conducts complex, important work under minimal supervision and with wide latitude for independent judgment.

This is a Career-Level position in the General Professional track.

Minimum Qualifications

EQUIVALENCY STATEMENT :

1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor’s degree = 4 years of directly related work experience).

Department may hire employee at one of the following job levels:

Privacy / Data Protection Analyst, III :

Requires a bachelor’s (or equivalency) + 6 years or a master’s (or equivalency) + 4 years of directly related work experience.

Preferences

• Experience with security frameworks such as NIST 800-171 or NIST 800-53.
• Experience with Utah Government Data Privacy Act ( GDPA ).
• Information security certification(s).
• General understanding of security operations and technical controls.
• Exposure to data privacy or data governance requirements.
• Excellent problem-solving and analytical skills.
• Ability to educate a non-technical audience about domain specific topics.
• Effective verbal and written communication skills.

Type

Benefited Staff

Special Instructions Summary

Additional Information

The University is a participating employer with Utah Retirement Systems(“URS”). Eligible new hires with prior URS service, may elect to enroll in URS if they make the election before they become eligible for retirement (usually the first day of work). Contact Human Resources at [phone] for information. Individuals who previously retired and are receiving monthly retirement benefits from URS are subject to URS’ post-retirement rules and restrictions. Please contact Utah Retirement Systems at [phone] or [phone] or University Human Resource Management at [phone] if you have questions regarding the post-retirement rules.

This position may require the successful completion of a criminal background check and/or drug screen.

The University of Utah values candidates who have experience working in settings with students and possess a strong commitment to improving access to higher education.

Veterans’ preference is extended to qualified applicants, upon request and consistent with University policy and Utah state law. Upon request, reasonable accommodations in the application process will be provided to individuals with disabilities.

Consistent with state and federal law, the University of Utah does not discriminate based upon race, ethnicity, color, religion, national origin, age, disability, sex, sexual orientation, gender, gender identity, gender expression, pregnancy, pregnancy-related conditions, genetic information, or protected veteran’s status. The University does not discriminate on the basis of sex in the education program or activity that it operates, as required by Title IX and 34 CFR part 106. The requirement not to discriminate in education programs or activities extends to admission and employment. Inquiries about the application of Title IX and its regulations may be referred to the Title IX Coordinator, to the Department of Education, Office for Civil Rights, or both.

To request a reasonable accommodation for a disability or if you or someone you know has experienced discrimination or sexual misconduct including sexual harassment, you may contact the Director/Title IX Coordinator in the Office of Equal Opportunity and Title IX ( OEO ). More information, including the Director/Title IX Coordinator’s office address, electronic mail address, and telephone number can be located at the:University of Utah Non‑Discrimination page.
Online reports may be submitted athttps://oeo.utah.edu

**https://publicsafety.utah.edu/safetyreport/**This report includes statistics about criminal offenses, hate crimes, arrests and referrals for disciplinary action, and Violence Against Women Act offenses. They also provide information about safety and security-related services offered by the University of Utah. A paper copy can be obtained by request at the Department of Public Safety located at 1658 East 500 South.
As perUniversity of Utah policy 5-108: Transfer of Benefits Eligible Staff Members, a new hire to the University of Utah who is still serving a 12 month probationary period will not be hired into another University of Utah job (a transfer) until the successful completion of the probationary period.