Privacy and Security Compliance Specialist

Location: University Park

APPLICATION INSTRUCTIONS:

* CURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process. Please do not apply here, apply internally through Workday.

* CURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, please login to Workday to complete the student application process. Please do not apply here, apply internally through Workday.

* If you are NOT a current employee or student, please click "Apply" and complete the application process for external applicants.

Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants.

POSITION SPECIFICS

The Pennsylvania State University Privacy Office, part of Information Technology, Information Security, is seeking a Privacy and Security Compliance Specialist to join our dynamic and innovative team. If you are passionate about the evolving landscape of data privacy, risk management, and regulatory compliance, we invite you to consider this opportunity. This position plays a key role in supporting Penn State's mission to maintain a unified and robust privacy and information security program.

This position will report directly to the University's Chief Information Security Officer (CISO) and Chief Privacy Officer (CPO).

The successful candidate will collaborate with a broad range of stakeholders across academic, administrative, and research units to ensure adherence to Penn State's privacy and data‑protection policies, standards, and regulatory obligations, including the Gramm-Leach-Bliley Act (GLBA), the Health Insurance Portability and Accountability Act (HIPAA), and international data‑protection and privacy laws.

KEY RESPONSIBILITIES

* Lead, advise, and support the development, implementation, and ongoing monitoring of enterprise‑wide compliance programs.

* Interpret and communicate applicable laws, regulations, policies, and standards to diverse audiences.

* Develop, deliver, and promote training and awareness initiatives related to Penn State's privacy and regulatory compliance obligations.

* Partner with internal and external entities to ensure appropriate safeguards for data governed by state, federal, and international requirements.

* Identify, assess, and mitigate privacy and compliance risks, and report instances of non‑compliance to appropriate stakeholders.

* Collaborate with units across the institution to support the achievement and maintenance of privacy, data protection, and compliance objectives.

REQUIRED QUALIFICATIONS

* Knowledge of domestic and international privacy and data‑protection laws and regulations, including GDPR, GLBA, HIPAA, and FERPA.

* Excellent verbal and written communication skills; strong analytical, judgment, and organizational abilities.

* Demonstrated commitment to outstanding customer service.

* Degree in business administration, healthcare, or a related field, plus one year of relevant experience, or an equivalent combination of education and experience.

PREFERRED QUALIFICATIONS

* Experience advising on enterprise‑level privacy and compliance programs including HIPAA.

* Experience performing privacy impact and compliance assessments.

* Experience working in a higher‑education environment.

MINIMUM EDUCATION, WORK EXPERIENCE & REQUIRED CERTIFICATIONS

Bachelor's Degree
1+ years of relevant experience; or an equivalent combination of education and experience accepted
Required

Certifications:

None

LOCATION

The location of this position is flexible and can operate fully remote within the United States (restrictions may apply), fully in-person at our University Park Campus, or in a hybrid model of both in-person and remote (restrictions may apply). Standard working hours are in the eastern time zone. Penn State IT is supportive of flexible work arrangements when aligned with the ability to meet the needs of the unit and the essential duties of the position.

Questions related to flexible work hours should be directed to the hiring manager during the interview process.

BACKGROUND CHECKS/CLEARANCES

Emp…