Program Director, Privacy Program Process And Governance

In tandem with the Chief Privacy and Data Officer and in collaboration with the Program Directors as appropriate, this role is responsible for the development, leadership, implementation, and integrity of the University's comprehensive global privacy program ('Privacy Program'), with specific focus and accountability to ensure that the Privacy Program has the required governance, standards, and policies, privacy incident management protocols, education and tools, transparent community and stakeholder engagement (including with the University's Privacy Council), and measurable outcomes in support of the University's mission and to foster a University privacy culture. To further these objectives, the Program Director will: - Facilitate the effective and efficient identification, prevention, detection, response, and correction of privacy-related noncompliance. - Assess, refine, and improve privacy processes, practices, and facilitation of improvements at the University and distributed levels with University stakeholders and stewards. - Manage privacy incident management, education, Privacy monitoring, and assigned domains, and privacy request programs. - Partner closely as needed with IT Security on third party vendor management programs, risk assessments, incident management, privacy controls, safeguards, and education. The Program Director also serves as a subject matter expert for various privacy regulations, including but not limited to the Family Educational Rights and Privacy Act (FERPA), Health Insurance Portability and Accountability Act (HIPAA), Emirati and Chinese privacy laws (e.g., China's Personal Information Protection Law (PIPL)), Gramm–Leach–Bliley Act (GLBA), Payment Card Industry Data Security Standard (PCI DSS), and the European Union's General Data Protection Regulation (GDPR).

Required Education:
Bachelor's Degree
Preferred Education:
Master's Degree
Required Experience:
7+ years of experience in a privacy compliance-related discipline, or equivalent combination of education and experience. Must include experience drafting and implementing written policies, programs, and procedures to guide university and unit privacy compliance initiatives.
Preferred Experience:
2+ years of experience with risk rating and modeling. Experience conducting risk-based compliance assessments and root cause analysis. Experience working directly with internal or external auditors. Experience working with committee structures and forming committees.of experience with management systems and business analysis activities. Experience working in higher education. Relevant privacy and risk reduction experience.of project management equivalent experience and or Management systems experience.
Required Skills, Knowledge and Abilities:
Demonstrated understanding of privacy frameworks and their applicability to the higher education or similar industry. Ability to identify and assess privacy risks and navigate a decentralized environment. Ability to partner with a technology team to assess, recommend, and implement strategies to ensure data is accessible, reliable, and protected. Strong critical thinking skills and analysis to solve problems. Effective communication skills with internal stakeholders, team members, peers, and leadership. Excellent written and verbal communication skills and interpersonal skills. Strong analytical and organizational skills, including demonstrated effective project, task, and time management skills. Demonstrated ability to respond and communicate with stakeholders during urgent situations and to create after action plans and follow up. Knowledge of the legislative process and the regulatory environment that influence higher education and R01 institutions. Ability to interpret and explain complex privacy regulations and translate legal and regulatory requirements into clear and effective communications, policies, processes, and practices. Willingness to engage on difficult issues and work with others with transparency and fairness.

In compliance with NYC's Pay Transparency Act, the annual base salary range for this position is USD $150,000.00 to USD $200,000.00. New York University considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer.
NYU aims to be among the greenest urban campuses in the country and carbon neutral by 2040. Learn more at nyu.edu/nyugreen.
EOE/AA/Minorities/Females/Vet/Disabled/Sexual Orientation/Gender Identity