Information Privacy and Compliance Analyst

Clark University - Worcester, MA

Part-time - Mid Level

Worcester, MA

1,001-5,000 employees

Educational Services

About the position

The Information Privacy and Compliance Analyst at Clark University plays a crucial role in ensuring the security and privacy of the University's data assets. This position involves developing, implementing, and maintaining compliance with information security and data privacy policies, while collaborating with various stakeholders to enhance data management workflows and training programs. The analyst will also manage third-party risk assessments and contribute to the University's overall information security strategy.

Responsibilities

• Monitor and advise on information security/privacy issues related to information assets and workflows.
• Stay updated on external regulations and assess potential risks to translate them into University policy.
• Develop and revise University policies and procedures related to data security and privacy.
• Review third-party vendor services and contracts for data security considerations.
• Monitor and document data-related components of the University's business continuity and disaster recovery program.
• Develop communications and training programs to support compliance with data security/privacy standards.
• Serve as staff support to the University's Information Security/Privacy Council.
• Participate in annual audits and data security/privacy reviews.
• Manage end-user training programs on information security and data privacy.
• Engage with external professional organizations relevant to information security/privacy.

Requirements

• Bachelor's degree plus 3 years of relevant experience in information technology, security, or risk management.
• Experience in a higher education environment preferred.
• Ability to translate compliance requirements into data security/privacy standards.
• Knowledge of information security/privacy standards and regulations (e.g., NIST, FERPA, HIPAA).
• Experience reviewing third-party vendor contracts for data security/privacy considerations preferred.
• High degree of integrity regarding computer security and confidentiality of information.
• Exceptional verbal and written communication skills.
• Ability to establish collaborative working relationships across the University.
• Demonstrated passion for problem solving and project management.

Nice-to-haves

• Experience in risk management within a higher education context.
• Familiarity with IT governance and operations.

Benefits

• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Retirement plan