Privacy / Data Protection Analyst, III

Job Summary

Huntsman Cancer Institute (HCI) at the University of Utah is seeking an experienced Privacy/Data Protection Analyst to develop and maintain policies and procedures that align with modern data privacy and cybersecurity frameworks. The analyst will anticipate and identify gaps in established frameworks and collaborate with HCI and University departments to resolve them. This role joins the Utah Population Database (UPDB) Shared Resource group, a leading source of in‑depth information supporting research on genetics, epidemiology, demography, and public health. The analyst will work with the UPDB cybersecurity team and coordinate with HCI Information Technology (HCI‑IT), the Information Security Office (ISO), and the Information Privacy Office (IPO). Success requires expert analytical skills, deep knowledge of cybersecurity and data‑privacy best practices, and strong communication abilities to train faculty, staff, and students, define risks for leadership, and liaise with external stakeholders. Huntsman Cancer Institute is dedicated to cancer prevention, care, and survivorship across Idaho, Montana, Nevada, Utah, and Wyoming, with worldwide impact.

Responsibilities

• Develop and implement a comprehensive Privacy Program for UPDB.
• Track compliance status within the organization’s security and privacy frameworks.
• Stay current with developments in data privacy standards and risks.
• Manage compliance evidence.
• Provide continuous cybersecurity and privacy compliance monitoring support.
• Track remediation activities.
• Coordinate with internal and external security and privacy stakeholders.
• Educate colleagues about data‑privacy best practices.
• Perform other cybersecurity and system‑administration duties as assigned.
• Monitor, analyze, and report organizational compliance with internal policies and external regulations (e.g., GDPR).
• Administer and update privacy guidelines; investigate non‑compliance.
• Identify business assets containing personal data.
• Conduct audits to ensure compliance and proactively address issues.
• Manage and respond to privacy‑breach incidents.
• Cooperate with supervisory authorities as needed.
• Evaluate and recommend improvements for privacy controls and procedures.
• Assist in developing privacy training to promote information‑privacy awareness.

Minimum Qualifications

• Bachelor’s degree (or equivalent) + 6 years of directly related work experience, or
• Master’s degree (or equivalent) + 4 years of directly related work experience.
• Equivalency: 1 year of higher education may substitute for 1 year of directly related work experience.

Preferred Qualifications

• Experience with security frameworks such as NIST 800‑171 or NIST 800‑53.
• Experience with the Utah Government Data Privacy Act (GDPA).
• Information‑security certification(s).
• General understanding of security operations and technical controls.
• Exposure to data‑privacy or data‑governance requirements.
• Excellent problem‑solving and analytical skills.
• Ability to educate a non‑technical audience about domain‑specific topics.
• Effective verbal and written communication skills.

Pay

Salary range: $50,000 – $93,000 per year.

Schedule

Full‑time position.

Department: 01240 – HCI Pedigree & Population Science Department
Location: Campus, University of Utah