Job Description

Agency Privacy Officer I DHHS Privacy & Security

The Utah Department of Health and Human Services (DHHS) is looking for an Agency Information Officer I to work within the DHHS Privacy and Security Office.

The Agency Privacy Officer I works within a state agency's privacy program and is tasked with supporting privacy initiatives and ensuring compliance with applicable privacy and records management laws and requirements, such as the Government Records Access and Management Act (GRAMA) and Government Data Privacy Act (GDPA) including any applicable agency-specific privacy law.

An Agency Privacy Officer I will work with the many organizational components of a state agency such as audit, compliance, IT, legal, operations, records management, services, and others to effectively fulfill their own duties and to assist others in fulfilling duties that may be ancillary to privacy.

Will perform a variety of tasks in the state agency's records lifecycle of personal data that are privacy-related and collaborate with other team members and stakeholders to ensure personal data is appropriately protected.

Why You Should Join Our Team

Become an integral part of the Utah Department of Health and Human Services (DHHS) and contribute to the vision of advocating for, supporting, and serving all individuals and communities in Utah;

ensuring all Utahns have fair and equitable opportunities to live safe and healthy lives. Help us achieve this through effective policy and a seamless system of services and programs.

The Agency

For information on the Utah Department of Health & Human Services, click here. This is an opportunity to make a difference, along with the satisfaction of helping the community.

Example of Duties

Assist in implementing and maintaining privacy policies and procedures in accordance with state and federal regulations.

• Conduct privacy impact assessments to identify potential risks and vulnerabilities.
• Create or update records series descriptions, proposed retention schedules, record series annotations and ensure compliance with record retention and disposition requirements.
• Serve as a point of contact for privacy-related inquiries, requests, breaches and incidents, ensuring timely and appropriate responses.
• Participate in and coordinate data privacy training programs for employees, ensuring completion within specified timelines and maintaining records of training completion.
• Collaborate with IT and security teams to ensure the secure handling of sensitive data.
• Support the development and implementation of, and perform, data privacy impact assessments (DPIAs).
• Assist in drafting and reviewing privacy-related documentation, including notices, consent forms, and agreements.
• Create and maintain notices of purposes of use.
• Process personal data amendment and correction requests.

Qualifications

includes knowledge, skills, and abilities required upon entry into position and trainable after entry into position)

The ability to effectively communicate and understand the following : verbal communications (e.g. in-person, video calls, and over the phone);

The ability to effectively : apply general rules to specific problems; identify patterns; understand context; organize information;

and compare and contrast different fact scenarios.

The ability to concentrate and complete tasks with minimal supervision.

The ability to timely respond to and work well with supervisors, coworkers, and other stakeholders.

The ability to identify problems and find solutions to these problems from existing playbooks or new approaches.

A general knowledge of privacy compliance and preferably education or certification that demonstrates that knowledge (e.

g. common privacy certifications include certifications from IAPP, (ISC)2, ISACA).

A general knowledge of privacy frameworks (e.g. NIST Privacy Framework, ISO 27701).

The ability and willingness to learn new things and conduct research with minimal supervision.

Teaching others how to do something.

Actively looking for ways to help people.

Knowledge of relevant equipment, policies, procedures, and strategies to promote effective local, state, or national security operations for the protection of people, data, property, and institutions.

Supplemental Information

• Risks found in the typical office setting, which is adequately lighted, heated and ventilated, e.g. safe use of office equipment, avoiding trips and falls, observing fire regulations, etc.
• Work requires physical exertion. May require the ability to stand; walk over rough surfaces; bend, crouch, stoop, stretch, reach, lift moderately heavy items (up to 50 lbs.).
• This position is currently a hybrid of both in-office and remote work days. Please note, a position's eligibility for remote work is established by agency management and is subject to change at their discretion at any time and for any reason.

Last updated : 2024-05-22