Associate Attorney and Privacy Officer

The University of North Carolina at Chapel Hill invites applications for the position of Associate University Counsel and Privacy Officer.

The Associate University Counsel and Privacy Officer will engage in a challenging, wide-ranging data and privacy practice. This joint appointment with the Office of University Counsel and the Office of Institutional Integrity & Risk Management will consolidate risk management and legal expertise to develop, implement and maintain privacy-focused policies, procedures and guidelines the keep the University in compliance with federal and State regulations, through coordination with University research and healthcare partners, campus business units, and risk management partners. Areas of practice will include the legal implications of compliance with HIPAA, federal and state privacy laws, FERPA, data breach response laws, General Data Protection Regulation (GDPR), Gramm Leach Bliley Act (GLBA), and FISMA. This person will help determine the University’s privacy-related vulnerabilities, conduct regular privacy reviews, be responsible for breach incident responses, serve as the centralized contact and authority for privacy issues, oversee research program monitoring for compliance with all applicable privacy regulations, and work with campus units and our healthcare partners to maintain the appropriate privacy and confidentiality consent, authorization forms and notices. This person will engage with information technology teams in order to establish policies and procedures, and interpretations that align with best practices and enable/facilitate the mission and operations of the institution. This position also will perform general transactional work involving data security, use, and transfer agreements, working closely with risk management partners and members of the Office of University Counsel.

The successful candidate will have a minimum of five years of legal experience in privacy compliance or risk management required and a minimum of three years of experience in privacy compliance or risk management in a higher education setting preferred. Significant corporate, compliance and data privacy experience. Extensive working knowledge of GDPR, HIPAA, FERPA, GLBA, FISMA and other privacy laws and experience managing data security and incident response matters required. Strong analytical and problem-solving abilities. Initiative, intellectual curiosity, tenacity; energized by challenges. Diplomacy skills and the ability to moderate between competing priorities. Ability to explain complex regulation issues and policies to all levels and rank. A sense of urgency and demonstrated commitment to high standards of ethics, regulatory compliance, customer service and process integrity. Effective team member; aptitude for building positive working relationships at all levels. Creativity, strategic common sense, good judgment, level-headedness. Healthcare Privacy Compliance (CHPC) certification – Preferred.

This position requires a law degree from an accredited school. Must be a member of the North Carolina Bar or become a member within one year of employment.

Certifications: Information Privacy Professional (CIPP) - Required

Review of nominations and applications will begin immediately and continue until the position is filled. All applications (including CV and letter of interest) must be submitted electronically on the UNC Human Resources portal using the following link: http://unc.peopleadmin.com/postings/183705

The University of North Carolina at Chapel Hill is an equal opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, sexual orientation, or status as a protected veteran.