Privacy Professional I

Visa sponsorship is not available for this position.

Outstanding U of A benefits include health, dental, and vision insurance plans; life insurance and disability programs; paid vacation, sick leave, and holidays; U of A/ASU/NAU tuition reduction for the employee and qualified family members; retirement plans; access to U of A recreation and cultural activities; and more!

The University of Arizona has been recognized for our innovative work-life programs. For more information about working at the University of Arizona and relocations services, please click here.

HIPAA Compliance Program:

• Supports program activities across departments and colleges designated as HIPAA Covered Components within the HIPAA Privacy Program.
• Assists with the annual review of HIPAA Covered Components and the annual HIPAA risk assessment process.
• Documents results of the annual assessments and supports remediation activities.

Vendor Privacy Support:

• Coordinates the review and tracking of Business Associate Agreements; performs vendor privacy risk assessments; supports the Authorization to Operate process for certain applications storing or processing regulated data.
• Partners with cross-functional teams to review safeguards and documentation are in place.

Training and Awareness Support:

• Supports privacy communication and training initiatives, including the development and updating of privacy training and marketing communications.
• Coordinates with human resources on training delivery, tracking, and reporting.

Privacy Incident Intake and Investigation:

• Supports privacy incident response activities, including incident intake, investigation, documentation, issue tracking, and remediation.
• Prepares summary reports for presentation to senior management and other stakeholders.

Privacy Program Support:

• Maintains current knowledge of applicable federal, state, and international privacy related laws, regulations, and accreditation standards.
• Supports the development, maintenance, and annual review of university privacy policies and procedures.
• Other Duties as Assigned.

Knowledge, Skills, and Abilities:

• Knowledge of privacy laws (e.g., GDPR, HIPAA) and compliance standards.
• Strong communication skills.
• Strong critical thinking skills.
• Strong interpersonal skills and a commitment to fostering productive, respectful partnerships across teams and roles.
• Ability to collaborate with stakeholders on privacy matters.
• Ability to meticulously review documents.
• Familiarity with elements of a privacy program.
• Demonstrated curiosity and willingness to learn new and often complex topics, including privacy, legal regulations, and information security.
• Willingness to obtain a certification from a relevant professional association, such as the International Association of Privacy Professionals (IAPP), Health Care Compliance Association (HCCA), or Information Systems Audit and Control Association (ISACA).

This job posting reflects the general nature and level of work expected of the selected candidate(s). It is not intended to be an exhaustive list of all duties and responsibilities. The institution reserves the right to amend or update this description as organizational priorities and institutional needs evolve.

• Bachelor's degree or equivalent advanced learning attained through professional level experience.

• Direct privacy experience is not required; relevant and transferable experience will be strongly considered for those with:


• Experience conducting or supporting investigations or other fact-finding activities.
• Experience documenting business processes.
• Experience coordinating or assisting with projects.
• Experience communicating with varied audiences.
• Experience handling sensitive or confidential information with discretion and sound judgment.