Privacy Officer

The Privacy Officer oversees the daily operations and activities of the Privacy Office safeguarding confidential and public health information through incident response management and overseeing, promoting, and performing privacy awareness activities agency wide. This position is located in the Office of Compliance and Accountability in Austin, Texas.

Primary Responsibilities:

• Responding to actual or suspected privacy incidents, making breach determinations, and reporting breaches.

• Monitoring for, proposing solutions to, and providing regular reports of privacy risks to agency leadership.

• Performing privacy risk assessments of agency information systems, applications, and new software requests

and assisting in the development and maintenance of a comprehensive data breach/privacy incident plan.

• Developing and implementing privacy controls, operating procedures, and strategic plans, goals, and objectives.

This position coordinates with divisions, programs, and staff across the agency and system, and serves as the central point of contact for inter-agency coordination with the HHSC Privacy Division. Candidates must have effective interpersonal and leadership skills and excellent verbal and written communication skills. Essential Job Functions:

(35%) Oversees agency incident response management by responding to privacy incidents, coordinating investigations, conducting analyses, making breach determinations, reporting breaches, developing recommendations for corrective actions, and maintaining proper documentation. Assists in the development and maintenance of a comprehensive data breach/privacy incident plan. Conducts privacy assessments of agency information systems, applications, and new software requests.

(20%) Works with agency staff, inter-agency partners, local health departments, and other external entities to coordinate, review, and respond to privacy-related inquiries. Provides subject matter expertise for program privacy coordinators, workgroups, and committees. Oversees the agency HIPAA mailbox.

(20%) Conducts research on current privacy frameworks, principles, and industry standards and develops recommendations for improvement. Coordinates and/or reviews privacy and security controls and proposes solutions to privacy risks through incident response management and consultation with program areas.

(10%) Monitors, reviews, and analyzes privacy-related legislation and tracks employee compliance with annual training, conducts surveys/questionnaires to improve privacy training.

(10%) Coordinates with inter-agency partners to develop and implement privacy awareness and compliance activities, policies, procedures, controls, and standards.

(5%) Performs other duties as assigned. Other duties as assigned include but are not limited to active participation and/or support to meet the agency's obligations for disaster response and/or recovery or continuity of operations activation.

Such participation may require an alternate shift pattern, assignment, and/or location. Knowledge Skills Abilities:

Knowledge of public health programs, HIPPA, information privacy, federal and state privacy laws, and/or compliance with regulatory directives.

Ability to analyze and solve work problems, prepare effective correspondence and reports for diverse audiences, and to make independent judgements to provide guidance to agency staff. Registration or Licensure Requirements:

• Professional certification in information privacy, information security, or compliance is required (or ability to obtain within 6 months of hire).

• Note: Preference will be given to candidates who hold the Certified Information Privacy Professional Certification (CIPP/US).

Initial Selection Criteria:

1.Graduation from an accredited four-year college or university with major course work in public policy, public administration, public health, political science, legal studies, information management, or related field.

• Note: Preference will be given to candidates who hold a master's or other graduate degree.

• Note: Job-related experience may be substituted for education on a year-to-year basis.

2.Experience preparing oral and written reports, managing projects, and facilitating meetings is required.

3.Experience developing policies and regulations is preferred. Additional Information:

This position is eligible to work a hybrid schedule, meaning employees may work part of the time remotely and part of the time in the office. Schedule will be discussed upon hire. MOS Code:

There may be no military occupation(s) that relate to the initial selection criteria and registration or licensure requirements for this position. All active-duty military, reservists, guardsmen, and veterans are encouraged to apply if qualified to fill this position. For more information see the Texas State Auditor's Military Crosswalk at http://www.hr.sao.state.tx.us/Compensation/JobDescriptions.aspx.

HHS agencies use E-Verify. You must bring your I-9 documentation with you on your first day of work.

I-9 Form - Click here to download the I-9 form.

In compliance with the Americans with Disabilities Act (ADA), HHS agencies will provide reasonable accommodation during the hiring and selection process for qualified individuals with a disability. If you need assistance completing the on-line application, contact the HHS Employee Service Center at 1-888-894-4747. If you are contacted for an interview and need accommodation to participate in the interview process, please notify the person scheduling the interview.

Top 10 Tips for Success when Applying to Jobs at HHSC and DSHS