Chief Privacy Officer-60016258

Chief Privacy Officer

The Department of Administration's (Admin) Office of General Counsel is seeking a Chief Privacy Officer (CPO) to develop, coordinate and manage the privacy program for South Carolina state government. In this role you will develop and manage training on information privacy activities within South Carolina state government. You will be responsible for participating in Admin's data governance practices, including ensuring that data collection and storage comply with federal and state laws.

You will assist agencies in developing and improving their own data management practices. You will ensure a regular cadence of privacy training and awareness programs for all state agencies.

This position is onsite in Columbia, SC.

• Develop and maintain the state-wide privacy strategy, framework, policies and procedures covering citizens, employees, and third-party vendors.
• Advise agencies on the inclusion of privacy, confidentiality, and data security requirements in policies and programs in order to ensure proper use of personal information.
• Provide leadership and guidance to agencies regarding contractual and operational issues that implicate federal and state privacy and breach notification laws, and other privacy directives.
• Work with legal and agency stakeholders to help ensure that information is up-to-date and adhere to current agency and legal requirements.
• Monitor and communicate changes and amendments to privacy legislation to agency staff to maintain compliance.
• Identify privacy risks within agencies and notify agency staff when privacy legislation could have an impact on their agencies. Maintain relationships with agency staff to serve as a subject matter expert in privacy related issues on a state level.
• Create and deliver educational privacy training and orientation programs in various formats to state employees, volunteers, and third parties. Lead state activities to foster information privacy across agencies.
• Perform initial and periodic privacy risk assessments and continuous monitoring to identify potential risks, provide remediation strategies, and ensure alignment with state and federal regulatory requirements.
• Collaborate with the Chief of Information Security Officer and information security team as a key stakeholder to manage and prevent privacy incidents.
• Oversee the Enterprise Privacy Office budget development, staffing, procurement, and contracts. Set work standards, define deadlines, and evaluate administrative goals.
• Lead and support staff through coaching, training, and performance development. Streamline workflows while implementing management policies and organizational initiatives. Foster a positive, team focused environment.
• Develop comprehensive strategic plans (short and long term) to support the success of statewide IT security and privacy structure and governance.

• A bachelor's degree with at least (6) years of experience working on privacy matters, such as privacy strategy, framework, policies and procedures covering citizens, employees and third-party vendors, with four (4) of the years in management, including responsibility for service delivery, budget and personnel management, and planning and resource allocation.
• Must be able to understand technology and its potential effect on information privacy and its use in supporting privacy initiatives.

• Strong working knowledge of privacy laws, of the release-of-information standards under applicable government and regulatory agencies' laws, and of the State's technical and business environment.
• Broad understanding of federal and state privacy laws, such as Computer Fraud and Abuse Act, the Electronic Communications Privacy Act, the CLOUD Act, IRS Publication 1075, Health Insurance Portability and Accountability Act, Family Education Rights and Privacy Act, Criminal Justice Information Services, private sector privacy laws at the state level, and common law actions.
• Ability to collaborate with a wide range of staff both internally and externally. Ability to communicate effectively both orally and in writing.
• Ability to communicate privacy-related concepts to a broad range of technical and non-technical audiences.
• Position may require overnight travel.
• Position may require employee to work evenings and weekends.
• Position will be required to report to work during emergency situations and for hazardous weather events.
• Employee may be required to work beyond the 37.5 hours per week either on-site, remotely or in combination of the two during all emergency or weather-related events.

Applicants indicating college credit or degree(s) on the application may bring a copy of college transcript to the interview. A copy of the transcript may also be uploaded as an attachment to the application, if required by the hiring department or if desired by the applicant. Please note that some areas of the Department may require an official, certified copy of the transcript prior to hiring or…