Job Description
Posting number: 191513
Department: Department of Administration
Division: General Counsel
Job classification: Unclassified
Posting type: Open
Categories: Legal, Attorney
Chief Privacy Officer
The Department of Administration's (Admin) Office of General Counsel is seeking a Chief Privacy Officer (CPO) to develop, coordinate and manage the privacy program for South Carolina state government. In this role you will develop and manage training on information privacy activities within South Carolina state government. You will be responsible for participating in Admin's data governance practices, including ensuring that data collection and storage comply with federal and state laws. You will assist agencies in developing and improving their own data management practices. You will ensure a regular cadence of privacy training and awareness programs for all state agencies.
This position is onsite in Columbia, SC.
Responsibilities of the Chief Privacy Officer:
- Develop and maintain the state-wide privacy strategy, framework, policies and procedures covering citizens, employees, and third-party vendors.
- Advise agencies on the inclusion of privacy, confidentiality, and data security requirements in policies and programs in order to ensure proper use of personal information.
- Provide leadership and guidance to agencies regarding contractual and operational issues that implicate federal and state privacy and breach notification laws, and other privacy directives.
- Work with legal and agency stakeholders to help ensure that information is up-to-date and adhere to current agency and legal requirements.
- Monitor and communicate changes and amendments to privacy legislation to agency staff to maintain compliance.
- Identify privacy risks within agencies and notify agency staff when privacy legislation could have an impact on their agencies. Maintain relationships with agency staff to serve as a subject matter expert in privacy related issues on a state level.
- Create and deliver educational privacy training and orientation programs in various formats to state employees, volunteers, and third parties. Lead state activities to foster information privacy across agencies.
- Perform initial and periodic privacy risk assessments and continuous monitoring to identify potential risks, provide remediation strategies, and ensure alignment with state and federal regulatory requirements.
- Collaborate with the Chief of Information Security Officer and information security team as a key stakeholder to manage and prevent privacy incidents.
- Oversee the Enterprise Privacy Office budget development, staffing, procurement, and contracts. Set work standards, define deadlines, and evaluate administrative goals.
- Lead and support staff through coaching, training, and performance development. Streamline workflows while implementing management policies and organizational initiatives. Foster a positive, team focused environment.
- Develop comprehensive strategic plans (short and long term) to support the success of statewide IT security and privacy structure and governance.
Examples of duties
- A bachelor's degree with at least (6) years of experience working on privacy matters, such as privacy strategy, framework, policies and procedures covering citizens, employees and third-party vendors, with four (4) of the years in management, including responsibility for service delivery, budget and personnel management, and planning and resource allocation.
- Must be able to understand technology and its potential effect on information privacy and its use in supporting privacy initiatives.
Additional Requirements:
- Strong working knowledge of privacy laws, of the release-of-information standards under applicable government and regulatory
agencies' laws, and of the State's technical and business environment. - Broad understanding of federal and state privacy laws, such as Computer Fraud and Abuse Act, the Electronic Communications Privacy Act, the CLOUD Act, IRS Publication 1075, Health Insurance Portability and Accountability Act, Family Education Rights and Privacy Act, Criminal Justice Information Services, private sector privacy laws at the state level, and common law actions.
- Ability to collaborate with a wide range of staff both internally and externally.
Ability to communicate effectively both orally and in writing. - Ability to communicate privacy-related concepts to a broad range of technical and non-technical audiences.
- Position may require overnight travel.
- Position may require employee to work evenings and weekends.
- Position will be required to report to work during emergency situations and for hazardous weather events.
- Employee may be required to work beyond the 37.5 hours per week either on-site, remotely or in combination of the two during all emergency or weather-related events.
Applicants indicating college credit or degree(s) on the application may bring a copy of college transcript to the interview. A copy of the transcript may also be uploaded as an attachment to the application, if required by the hiring department or if desired by the applicant. Please note that some areas of the Department may require an official, certified copy of the transcript prior to hiring or within a specific timeframe required by that area, after hiring. Failure to produce an official, certified transcript may result in not being hired or termination.
Qualifications
Certified Information Privacy Professional (CIPP) or similar security certification/accreditation.
Supplemental information
The Department of Administration is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.
Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education. A resume will not be accepted nor reviewed to determine if an applicant has met the qualifications for the position.
The South Carolina Department of Administration offers an exceptional benefits package for full time (FTE) employees:
- Health, dental, vision, long-term disability, and life insurance for employees, spouse, and children. Click here for additional information.
- 15 days annual (vacation) leave per year
- 15 days sick leave per year
- 13 paid holidays
- Paid Parental Leave
- S.C. Deferred Compensation Program available (S.C. Deferred Compensation)
- Retirement benefit choices *
*Enrollment in one of the listed plans is required for all FTE employees; please refer to the contribution section of hyperlinked retirement sites for the current contribution rate of gross pay.
