THECB - General Counsel II (Privacy Officer) 104227

Texas Higher Education Coordinating Board; Austin (TX); Hybrid; USD 150,000 - 210,000; Full time

Job summary

The Texas Higher Education Coordinating Board seeks a strategic Chief Privacy Officer to design and oversee its comprehensive data privacy program across Texas higher education. You will champion privacy, compliance, and trust in a data-driven public sector environment, collaborating with the CIO and CISO.

The role requires a J.D. from an accredited law school, 5+ years as an attorney, and strong knowledge of FERPA/GLBA/HEA.

Qualifications

• J.D. from an accredited law school and admission to the Texas bar.
• Minimum 5 years of experience as a licensed attorney; CIPP may substitute for experience.
• Experience in state and federal privacy laws (FERPA, GLBA, HEA).
• Experience in privacy analysis, information security, or process management.

Responsibilities

• Serve as THECB privacy officer for all privacy issues.
• Review and update agency policies on FERPA, GLBA and other confidential data.
• Review and approve data sharing agreements with governmental bodies and higher education entities.
• Create and review policies governing access and use of agency data and AI.
• Coordinate privacy controls and annual compliance with the Texas Cybersecurity Framework.
• Advise on FAFSA/HEA data usage and privacy considerations.

Skills

Privacy and information security

Policy development

Communication

Collaboration

Leadership

Education

J.D. from accredited law school

Bachelor's degree

Job description

Introduction

The Texas Higher Education Coordinating Board (THECB) is seeking a strategic Chief Privacy Officer (CPO) to lead, design, and oversee our comprehensive data privacy and protection program. In this role, you will champion the safeguarding of sensitive student, institutional, and agency data across the state's higher education ecosystem. If you are a collaborative team player dedicated to fostering a culture of privacy, compliance, and trust in a data-driven public sector environment, we invite you to help shape the future of Texas higher education.

General Description

The Texas Higher Education Coordinating Board (Coordinating Board) is seeking an attorney with experience in Texas administrative law, education law, artificial intelligence, data privacy, data governance and cybersecurity to join the agency as the Chief Privacy Officer in its quest to change the future of Texans and Texas through the power of higher education. The Coordinating Board provides leadership and coordination across Texas colleges and universities. As part of its mission, the Coordinating Board collects and analyzes data to provide institutions of higher education with the tools to best serve their students.

General Duties and Responsibilities

• Serves as the THECBs privacy officer for all privacy issues.
• Monitor, review and/or update agency policies governing the following:
• Internal access and use of Federal Educational Rights Privacy Act (FERPA), Gramm-Leach-Bliley Act (GLBA) and other confidential data by employees and contractors.
• Access and use of de-identified data by external entities, including guidance on acceptable de-identification or anonymization.
• Data breach reporting and response processes.
• Access and use of FERPA confidential data by researchers; and
• Training necessary for employees in roles integral to data privacy
• Review and approve authorizing data sharing agreements with other governmental bodies (including Tri-Agency); private and public institutions of higher education; and school districts.
• Review contract provisions authorizing disclosure of FERPA confidential information under permissible exceptions.
• Create and review policies governing access and use of agency data and artificial intelligence.
• Create and provide guidance on the implementation of data projects.
• Coordinate and/or review data security and privacy controls and recommend compliance measures, including yearly analysis of the Agency's compliance with the Texas Cybersecurity Framework.
• Provide counsel on permissible use of Free Application for Federal Student Aid (FAFSA) data and other data governed by the Higher Education Act (HEA).
• Interface with the Privacy Technical Assistance Center, as needed.
• Provide guidance on the applicability of all privacy laws, as needed.
• Works closely with the Agency's Chief Information Officer, and Chief Information Security Officer regarding current and evolving privacy and security issues.
• Monitor, analyze, and review artificial intelligence and privacy-related legislation.
• Consult with other program areas for assessment of threats to information privacy.
• May prepare reports on privacy analysis for the agency.
• Advise Data Governance Council to establish and support data safeguarding and governance processes that appropriately address privacy compliance risks including audit findings.
• Perform other duties as assigned.

Knowledge, Skills or Abilities

• Knowledge of privacy and information security standards, of process development, and of project management theories and practices.
• Knowledge in state and federal privacy laws, including but not limited to FERPA, GLBA and HEA.
• Skill in conducting research, in diagramming business process flows, and in the use of a computer and applicable software.
• Demonstrated organization, facilitation, written and oral communication, and presentation skills.
• Skills in collaboration, teamwork, and problem-solving to achieve goals.
• Excellent writing skills.
• Ability to identify and resolve problems, to maintain confidentiality and protect privacy, to develop and implement policies and procedures, and to supervise the work of others.
• Ability to adhere to the agency's internal management policies and procedures.

Required Minimum Education and Experience

• J.D. from accredited law school and Bachelor's degree from an accredited college or university.
• Five years (5) full-time experience as a licensed, practicing attorney. Years of experience as a Certified Information Privacy Professional (CIPP) may substitute for years of experience as a licensed, practicing attorney.
• Experience in state and federal privacy laws, including but not limited to FERPA.
• Experience in privacy analysis, information security, or process management work.

Preferred

• Three (3) years experience in data privacy and/or cybersecurity.
• Certified Information Privacy Professional United States (CIPP/US).
• Certified Information Privacy Technologist (CIPT)
• Artificial Intelligence Governance Professional (AIGP)
• Three (3) years experience directly relevant experience working for an institution of higher education or other state agency handling confidential Personally Identifiable Information (PII).
• Knowledge and experience with the Higher Education Act of 1965.

Physical Requirements and/or Working Conditions

• Regular, reliable, and punctual attendance at work;
• Frequent use of personal computer, copiers, printers and telephones;
• Frequently works under deadlines, as a team member, and in direct contact with others.

Workforce

Must be able to:

• Demonstrate knowledge of customer service deliverables.
• Show flexibility and adaptability toward changes in assignments and work schedules, working extended hours as necessary.
• Adhere to the organizations internal management policies and procedures.
• Contribute to the agency's performance measures and mission.

Veterans Information

THECB is committed to hiring Veterans. To receive Veterans Preference, a copy of the FORM DD214 -member #4, must be attached when submitting your application.

AN EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER

THECB does not discriminate on the basis, of race, color, religion, sex, national origin, age, or disability in employment or the provision of services.

Job offer and continuation of employment with THECB is contingent upon:

• Proof of education and experience listed on the application.
• Eligibility/authorization to work in the U.S.
• Satisfactory results from a pre-employment criminal history background check.
• Compliance with the Selective Service Law for males ages 18-25. Please be advised that under Texas law, names and other information concerning applicants or nominees may be subject to disclosure upon request.
• THECB does not allow dual employment with other state of Texas agencies or institutions.
• Skills assessment may be conducted at time of interview.
• Salary for this position will be commensurate with experience and qualifications.

Required In-Office Days

This position is authorized for a hybrid telework schedule. Employees are required to work in the office two (2) days per week, with the remaining three days eligible for telework. Specific in-office days may be determined by the department to meet business needs.

Military Crosswalk

https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_Legal.pdf

The Texas Higher Education Coordinating Board participates in E-Verify for each new employees Form I-9 to confirm work authorization. For questions, please call the HR Department at 512-427-6190. For vocal and/or hearing assistance call 7-1-1.