Agency Privacy Officer

Salary: $30.64 - $48.59 Hourly
Location : Salt Lake County, UT
Job Type: Full Time
Remote Employment: Flexible/Hybrid
Job Number: 44025
Agency: 250 Health & Human Services
Unit: 1350 DHHS PRIVACY & SECURITY
Opening Date: 02/20/2025
Closing Date: 2/26/2025 11:59 PM Mountain
FLSA: Non-Exempt
Recruiter: Chelsea Edwards chelseaedwards@utah.gov 801 538-4236
# of Openings: 1
Background Check: You must successfully pass a criminal history check.
Career Mobility: This position may be filled as a career mobility.
Schedule Code: B - Competitive Career Service - Employment in this position requires a probationary period.
Benefits: This position is eligible for a full benefits package. See benefits tab below for details.
EEO Statement: The State of Utah is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. For accommodations, dial 711 or TTY: 800-346-4128.

Job Description
Agency Privacy Officer II

DHHS Privacy & Security
The Utah Department of Health and Human Services (DHHS) is looking for an Agency Information Officer II to work within the DHHS Privacy and Security Office. The Agency Privacy Officer II works within a state agency's privacy program and is tasked with supporting privacy initiatives and ensuring compliance with applicable privacy and records management laws and requirements. This role specifically works with Utah Medicaid. This includes compliance with the following laws: the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule; HIPAA Breach Notification Rule; HIPAA De-identification Standard; Centers for Medicare & Medicaid Services (CMS) MARS-E and ARS privacy controls, Common Rule, Government Records Access and Management Act (GRAMA), Government Data Privacy Act (GDPA), any other applicable privacy laws.
The Agency Privacy Officer Il work with the many organizational components of a state agency such as audit, compliance, IT, legal, operations, records management, services, and others to effectively fulfill their own duties and to assist others in fulfilling duties that may be ancillary to privacy. The Agency Privacy Officer II performs a variety of tasks in the state agency's records lifecycle of personal data that are privacy-related and collaborate with other team members and stakeholders to ensure personal data is appropriately protected.
Why You Should Join Our Team

Become an integral part of the Utah Department of Health and Human Services (DHHS) and contribute to the vision of advocating for, supporting, and serving all individuals and communities in Utah; ensuring all Utahns have fair and equitable opportunities to live safe and healthy lives. Help us achieve this through effective policy and a seamless system of services and programs.
The Agency

For information on the Utah Department of Health & Human Services, click here. This is an opportunity to make a difference, along with the satisfaction of helping the community.

Effective July 1, 2021, State of Utah Employees must either reside in Utah or be in the process of relocating to within 30 days of their start date.
Responsibilities

• Assist in implementing and maintaining privacy policies, procedures, plans in accordance with state and federal regulations.
• Conduct privacy impact assessments to identify potential risks and vulnerabilities associated with the processing of personal data.
• Serve as a point of contact for privacy-related inquiries, requests, breaches and incidents, ensuring timely and appropriate responses.
• Participate in and coordinate data privacy training programs for employees, ensuring completion within specified timelines and maintaining records of training completion.
• Collaborate with IT and security teams to ensure the secure handling of sensitive data.

• Assist in drafting and reviewing privacy-related documentation, including notices (e.g. notices of privacy practices), consent forms (e.g. written authorizations), and agreements.
• Create and maintain required records relating to privacy activities.
• Process personal data amendment and correction requests.

Qualifications
(includes knowledge, skills, and abilities required upon entry into position and trainable after entry into position)

• The ability to effectively communicate and understand the following: verbal communications (e.g. in-person, video calls, and over the phone); and written communications (e.g. emails, SMS messages, and privacy-related compliance documents).
• The ability to effectively: apply general rules to specific problems; identify patterns; understand context; organize information; and compare and contrast different fact scenarios.
• The ability to concentrate and complete tasks with minimal supervision.
• The ability to timely respond to and work well with supervisors, coworkers, and other stakeholders.
• The ability to identify problems and find solutions to these problems from existing playbooks or new approaches.
• A general knowledge of privacy compliance and preferably education or certification that demonstrates that knowledge (e.g. common privacy certifications include certifications from IAPP, (ISC)2, ISACA).
• A general knowledge of privacy frameworks (e.g. NIST Privacy Framework, ISO 27701).
• The ability and willingness to learn new things and conduct research with minimal supervision.
• Teaching others how to do something.
• Knowledge of relevant equipment, policies, procedures, and strategies to promote effective local, state, or national security operations for the protection of people, data, property, and institutions.

Supplemental Information

• Risks found in the typical office setting, which is adequately lighted, heated and ventilated, e.g. safe use of office equipment, avoiding trips and falls, observing fire regulations, etc.
• Work requires physical exertion. May require the ability to stand; walk over rough surfaces; bend, crouch, stoop, stretch, reach, lift moderately heavy items (up to 50 lbs.).
• This position is currently a hybrid of both in-office and remote work days. Please note, a position's eligibility for remote work is established by agency management and is subject to change at their discretion at any time and for any reason.
• Only applicants selected for an interview will be contacted.
• DHRM rules apply for promotions and transfers.

Benefits:
The State of Utah offers eligible employees a variety of benefits including medical, dental, life and disability insurance, as well as a comprehensive leave program. Please click the following link for a detailed information page: To access a Total Compensation Calculator in Excel format click

FMLA General Notice:
(right click + open link in new tab)
(clic derecho + abrir en una pestaa nueva?)
01

Only applicants selected for an interview will be contacted.The interview selection process is based on your answers to the application questions. Your answers to the questions on this application should be specific to the question that was asked and must be supported by your resume or work history otherwise you may not receive credit. Failure to answer the application questions completely and appropriately may result in disqualification, this includes copy/pasting your resume instead of answering the question. "See resume" or "see work history" are not acceptable answers to any question.

• Yes
• No

02

While this position allows some teleworking, employees of the state government must be Utah residents. If you are selected for this position and currently live out of the state, are you willing to relocate?

• Yes
• No

03

Are you a current employee of the Utah Department of Health & Human Services?

• Yes
• No

04

If you are a current or previous employee of the Department of Health (DOH), Department of Human Services (DHS), Department of Health & Human Services (DHHS), or other Utah state agency, please list the department you worked in, when you worked for the DOH or DHS, your job title(s), and a brief description of the duties you performed.
05

Rate your level of experience using word processing and spreadsheets. Describe your experience in detail, including experience using Word and Excel, and any other software programs you have used.

• None
• less than 6 months
• 1 - 2 years
• 3 - 4 years
• 5 or more years

06

How many years of professional experience do you have as an information privacy and/or security officer?

• None to one year
• One year to three years
• Three to five years
• Five to seven years
• Seven or more years

07

How much experience do you have drafting and developing organization policies on matters of information privacy and security?

• None to one year
• One year to three years
• Five to seven years
• Three to five years
• Seven or more years

08

Please indicate how you heard about this specific job posting.

• State of Utah job site (www.governmentjobs.com/careers/utah)
• Referred by a Friend or Family
• Indeed
• Other External Job Board or Site
• LinkedIn
• Social Media (Facebook, Twitter, etc.)
• DWS job website (www.jobs.utah.gov)
• Advertisement (Digital Ad, Billboard, Print, etc.)
• Professional Network (Association, Membership, Work Colleague)
• University Network (Handshake, School Job Board, Career Center, etc.)
• Contacted by a Recruiter
• Career or Job Fair
• Internship
• Interviewed for different position
• Internal communications (Agency/Division, etc.)
• Other (not listed above)

Required Question