Information Privacy and Compliance Analyst - Clark University

Clark University - Worcester, MA

Part-time - Mid Level

Worcester, MA

Educational Services

About the position

The Information Privacy and Compliance Analyst at Clark University plays a crucial role in developing, implementing, and ensuring compliance with the university's information security and data privacy policies. This position requires collaboration with various stakeholders to enhance data management workflows and ensure adherence to regulatory requirements. The analyst will also be responsible for training programs, third-party risk management, and monitoring compliance with external regulations and standards.

Responsibilities

• Monitor and advise on information security/privacy issues related to information assets and workflows.
• Stay updated on external regulations and assess potential risks to translate them into university policy.
• Develop and revise university policies and procedures related to data security and privacy.
• Collaborate with data owners on process improvements and participate in incident response activities.
• Review third-party vendor services/contracts for data security/privacy considerations and develop monitoring processes.
• Document data-related components of the university's business continuity and disaster recovery program.
• Develop communications and training programs to support compliance with data security/privacy standards.
• Serve as staff support to the University's Information Security/Privacy Council.
• Participate in annual audits and data security/privacy reviews as needed.
• Manage end-user training programs on information security and data privacy.

Requirements

• Bachelor's degree plus 3 years of relevant experience in information technology, security, or risk management.
• Experience in a higher education environment preferred.
• Ability to translate compliance requirements into data security/privacy standards and policy.
• Knowledge of information security/privacy standards and regulations (e.g., NIST, FERPA, HIPAA, GDPR).
• Experience reviewing third-party vendor contracts for data security/privacy considerations preferred.
• High degree of integrity regarding computer security and confidentiality of information.
• Exceptional verbal and written communication skills, with the ability to explain complex issues to non-technical audiences.
• Demonstrated passion for problem-solving and project management experience.
• Ability to work autonomously in a fast-paced environment with multiple priorities.

Nice-to-haves

• Experience in a higher education environment preferred.
• Knowledge of IT governance and operations.

Benefits

• Paid time off
• Generous retirement plan
• Group health and dental insurance
• Life insurance
• Tuition assistance
• Access to campus amenities