Pay Range: USD $73,610.00 - USD $132,500.00 /Yr. Overview:
The Vice President of Compliance and Privacy is currently hiring for a Privacy Program Manager. This position oversees the management, coordination, and assessment of the University's data‑privacy activities, directing the University‑wide privacy program in alignment with federal, state, and international privacy requirements and serves as Auburn University's HIPAA Privacy Officer. Collaborates with decentralized privacy functions to strengthen institutional privacy strategy, policies, best practices, and contractual safeguards; plans and delivers training programs; consults with departments to enhance internal processes and reduce risks associated with data‑privacy incidents; and promotes a strong culture of data stewardship, accountability, and ethical compliance across the University.
Responsibilities:
- Supports the design, implementation, and ongoing maintenance of the University’s data‑privacy program, including policies, procedures, standards, and operational controls that protect personal and sensitive information across academic and administrative functions. Provides guidance on the development, implementation, and maintenance of University‑wide privacy policies and procedures. Manages data‑breach notification assessments and response activities in accordance with applicable state, federal, and international privacy laws. Reviews software and third‑party vendor requests to ensure compliance with University data‑privacy requirements and to confirm that contractual terms adequately safeguard University data and minimize institutional risk.
-
Manages all activities related to the development, implementation, and maintenance of Auburn’s HIPAA privacy program, including policies, procedures, and core documentation governing the confidentiality and protection of PHI. Conducts and documents recurring training for units with access to ePHI, audits Business Associate Agreements and related workflows, and ensures compliance with HIPAA, the HITECH Act, and applicable state laws.
-
Supports administration of the University’s Electronic Privacy Policy by providing e‑discovery and electronic‑preservation services to the Office of General Counsel, Division of Internal Audit, Research Integrity and Compliance, Athletics Compliance, and external counsel, in accordance with University policy and the Office of Audit, Compliance & Privacy Charter. Provides subject‑matter expertise to the Office of General Counsel regarding the sequestering, securing, or preservation of data in response to litigation, subpoenas, investigations, and public‑records requests.
-
Serves as a resource to academic and administrative units by consulting on, evaluating, and remediating issues related to the confidentiality and protection of University records in both electronic and physical formats. Collaborates with stakeholders across the institution to support data‑governance best practices, including appropriate data retention and deletion. Cultivates strong relationships with campus partners to strengthen the University’s culture of compliance, ethics, and shared accountability. Provides clear, practical guidance consistent with applicable laws, regulations, and University policies.
-
Maintains current knowledge of federal, state, and international privacy laws and regulations, including FERPA, HIPAA, GLBA, CCPA, GDPR, and other emerging privacy frameworks. Provides guidance to University stakeholders to ensure institutional compliance with evolving legal and regulatory requirements.
-
Monitors organization‑wide compliance with privacy laws and University policies, conducting audits to identify, document, and remediate compliance gaps. Evaluates whether required training, documentation, and operational processes are being maintained effectively and efficiently. Delivers data‑privacy training as needed and recommends corrective actions to support adherence to privacy laws and to strengthen the University’s overall compliance program in alignment with the U.S. Federal Sentencing Guidelines.
Qualifications:
- Bachelor's degree in Business, Law, Communication, Public Administration, or related field.
-
5 years of experience in privacy law, regulatory compliance, healthcare management, HIPAA, GDPR, research administration, auditing, legal services, organizational compliance, or a related field.
License and Certifications:
-
Certified Compliance & Ethics Professional (CCEP) Upon Hire Required Or
-
Certified Information Privacy Professional (CIPP)/US Upon Hire Required Or
-
Certified Information Privacy Manager (CIPM) Upon Hire Required Or
Desired Qualifications:
-
Experience in a higher‑education environment—particularly interpreting and applying laws and regulations preferred.
-
Juris Doctor (JD) preferred.
Minimum Knowledge, Skills, and Abilities:
- Demonstrated knowledge of data integrity/privacy practices and applicable risk and compliance management frameworks.
-
Strong knowledge of federal and state privacy laws and regulations
-
Demonstrated understanding of data‑integrity, privacy practices, and risk/compliance management frameworks
-
Knowledge of privacy‑program development and governance
-
Strong analytical and investigative skills
-
Exceptional communication and training abilities
-
Ability to build collaborative relationships across decentralized units
-
Ability to manage and safeguard sensitive information
Why Work at Auburn:
- Life-Changing Impact: Our work changes lives through research, instruction, and outreach, making a lasting impact on our students, our communities, and the world.
-
Culture of Excellence: We are committed to leveraging our strengths, resources, collaboration, and innovation as a top employer in higher education.
-
We’re Here for You: Auburn offers generous benefits, educational opportunities, and a culture of support and work/life balance.
-
Sweet Home Alabama: The Auburn/Opelika area offers southern charm, vibrant downtown scenes, top-ranked schools, and easy access to Atlanta, Birmingham, and the Gulf of Mexico beaches.
-
A Place for Everyone: Auburn is committed to fostering an environment where all faculty, staff, and students are welcomed, valued, respected, and engaged.
-
Ready to lead and shape the future of higher education? Apply today! War Eagle!
Equal Opportunity Compliance Statement: It is our policy to provide equal employment and education opportunities for all individuals without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, gender expression, pregnancy, age, disability, protected veteran status, genetic information, or any other classification protected by applicable law. Please visit the Office of Equal Opportunity Compliance's website to learn more.
