Data and Privacy Officer

Job Appointment

Full-time. This position is exempt from Civil Service and is an "At Will" position.

Monday–Friday, 8 am–5 pm. Work hours will vary to meet business needs.

In person at the Portland Building, 1120 SW 5th Ave, Portland, OR 97204

Please refer to our benefits tab for an overview of the benefits associated with this position.

Portland is Oregon's largest city, home to more than 630,000 residents and serving a dynamic metro region of over 2 million people. As the City stands up a brand-new office at the center of how Portland governs data and protects resident privacy, this is a unique opportunity to build a program from the ground up and leave a lasting mark on the City's data governance and privacy practices.

In 2026, Portland City Council adopted a framework for a new City Data and Privacy Office (CDPO). The CDPO is a centralized office responsible for advancing citywide data governance, privacy protections, transparency, and stewardship of City data assets. This office will serve as the City's central point of accountability for data governance, developing policies and standards for the collection, use, retention, sharing, and management of City data, and coordinating consistent practices across bureaus.

The City of Portland is seeking a strategic, collaborative, and transparent leader to serve as its inaugural City Data & Privacy Officer (CDPO). This is a rare opportunity to stand up a brand-new citywide office and shape how the City governs, protects, and uses data for years to come.

Reporting to the City Operations Deputy City Administrator, the City Data & Privacy Officer leads the establishment, administration, and operations of the City Data and Privacy Office, with minimal direction. This is a single-incumbent, executive-level classification mandated by City Resolution, distinct from the City Administrator, Deputy City Administrators, and Bureau/Office Directors in that it holds citywide authority specifically over data governance, privacy oversight, and surveillance technology.

The City Data & Privacy Officer will directly supervise a minimum of four (4) positions and build out a foundational team focused on privacy policy, data governance, and data analytics, with potential for the office to grow pending scope and need over time.

• Act as the City's lead for data governance, privacy oversight, and the surveillance technology inventory.
• Establish and chair the Data Governance Board and direct citywide data governance and privacy oversight.
• Develop and implement
  citywide data governance and privacy policies, including a citywide data minimization framework and a Privacy First Policy.
• Create an enterprise data inventory accounting for all City datasets and their publication/sharing status.
• Operationalize and lead mandatory Privacy Impact Assessments prior to deployment of pilots or programs involving data, automated decision-making systems, or large language models.
• Audit and evaluate high-risk technologies, including AI, LLMs, and automated decision-making systems, for bias, privacy risk, and policy compliance.
• Coordinate delivery of required reports to Council and City leadership on the sensitive data inventory and risk mapping.
• Facilitate statutory public engagement, at least once every three years, for Council to review the scope, priorities, and authorities of the Office.
• Partner with Communications and Engagement staff on outreach to underserved communities, multilingual data-rights materials, and ongoing community technology listening sessions.
• Manage
  and supervise the…