Privacy and Security Compliance Specialist

Position Overview

The Pennsylvania State University Privacy Office, part of Information Technology, Information Security, is seeking a Privacy and Security Compliance Specialist to join our dynamic and innovative team. If you are passionate about the evolving landscape of data privacy, risk management, and regulatory compliance, we invite you to consider this opportunity. This position plays a key role in supporting Penn State's mission to maintain a unified and robust privacy and information security program.

This position will report directly to the University's Chief Information Security Officer (CISO) and Chief Privacy Officer (CPO).

The successful candidate will collaborate with a broad range of stakeholders across academic, administrative, and research units to ensure adherence to Penn State's privacy and data protection policies, standards, and regulatory obligations, including the Gramm-Leach-Bliley Act (GLBA), the Health Insurance Portability and Accountability Act (HIPAA), and international data protection and privacy laws.

• Lead, advise, and support the development, implementation, and ongoing monitoring of enterprise-wide compliance programs.
• Interpret and communicate applicable laws, regulations, policies, and standards to diverse audiences.
• Develop, deliver, and promote training and awareness initiatives related to Penn State's privacy and regulatory compliance obligations.
• Partner with internal and external entities to ensure appropriate safeguards for data governed by state, federal, and international requirements.
• Identify, assess, and mitigate privacy and compliance risks, and report instances of noncompliance to appropriate stakeholders.
• Collaborate with units across the institution to support the achievement and maintenance of privacy, data protection, and compliance objectives.

• Knowledge of domestic and international privacy and data protection laws and regulations, including GDPR, GLBA, HIPAA, and FERPA.
• Excellent verbal and written communication skills; strong analytical, judgment, and organizational abilities.
• Demonstrated commitment to outstanding customer service.
• Degree in business administration, healthcare, or a related field, plus one year of relevant experience, or an equivalent combination of education and experience.

• Experience advising on enterprise-level privacy and compliance programs including HIPAA.
• Experience performing privacy impact and compliance assessments.
• Experience working in a higher education environment.

Bachelor's Degree, 1+ years of relevant experience; or an equivalent combination of education and experience accepted. Required

Certifications:

None.

The location of this position is flexible and can operate fully remote within the United States (restrictions may apply), fully in-person at our University Park Campus, or in a hybrid model of both in-person and remote (restrictions may apply). Standard working hours are in the eastern time zone. Penn State IT is supportive of flexible work arrangements when aligned with the ability to meet the needs of the unit and the essential duties of the position.

Questions related to flexible work hours should be directed to the hiring manager during the interview process.

Employment with the University will require successful completion of background check(s) in accordance with University policies. Penn State does not sponsor or take over sponsorship of a staff employment Visa. Applicants must be authorized to work in the U.S.

The salary range for this position, including all possible grades, is $61,800.00 - $89,600.00.

Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children.

Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact .

Penn State is committed to and accountable for advancing equity, respect, and belonging. We embrace individual uniqueness, as well as a culture of belonging that supports equity initiatives, leverages the educational and institutional benefits of inclusion in society, and provides opportunities for engagement intended to help all members of the community thrive. We value belonging as a core strength and an…