Information Privacy and Compliance Analyst

Clark University - Worcester, MA

Part-time - Mid Level

Worcester, MA

1,001-5,000 employees

Educational Services

About the position

The Information Privacy and Compliance Analyst at Clark University plays a crucial role in developing, implementing, and ensuring compliance with the university's information security and data privacy policies. This position involves continuous evaluation of the university's security/privacy program, collaboration with IT staff and data managers, and the management of third-party risk related to IT contracts. The analyst will also be responsible for training and awareness programs to promote compliance with relevant regulations and standards.

Responsibilities

• Monitor and advise on information security/privacy issues related to information assets and data systems.
• Stay updated on external regulations and data security/privacy standards applicable to higher education.
• Develop and revise university policies and procedures related to data security and privacy.
• Review third-party vendor services/contracts involving Confidential or Restricted data.
• Monitor and document the data-related components of the university's business continuity and disaster recovery program.
• Develop communications and information briefs regarding external regulations and data security/privacy standards.
• Manage end user information security and data privacy training programs.
• Participate in annual university audits and data security/privacy reviews.

Requirements

• Bachelor's degree plus 3 years of relevant experience in information technology, security, or risk management.
• Experience in a higher education environment preferred.
• Knowledge of information security/privacy standards and best practices (e.g., NIST, SANS).
• Experience reviewing and monitoring third-party vendor contracts for data security/privacy considerations.
• Exceptional verbal and written communication skills.

Nice-to-haves

• Experience in project portfolio management.
• Demonstrated ability to translate compliance requirements into data security/privacy standards.
• Knowledge of IT governance and operations.

Benefits

• Health insurance
• Dental insurance
• Paid time off
• Life insurance
• Retirement plan