Privacy Manager - Mayor's Office of Data & Innovation

Overview

Salt Lake County invites you to explore our exciting career opportunities. We seek highly enthusiastic individuals to enrich our County with your experience and talent. If you enjoy working in a team environment that is committed to changing the lives of its community, please keep reading. At Salt Lake County, our culture is woven into all aspects of our work and our employees’ lives, from the way we treat each other to the way we support the community.

To promote and foster a fun and healthy work environment, we appreciate employees through great benefits, a healthy work-life balance, and room to grow and develop. Salt Lake County is about connecting people and championing our community. Community is more than a place… it's our heart and service that bring us together. We encourage a work-life balance. Working for Salt Lake County is more than just a paycheck.

A career with Salt Lake County includes several benefits and perks. We support our employees with 12 Holidays, up to 24 vacation days, 12 sick days, and one personal day every year.

Under the direction of the Director of Performance & Innovation, the Privacy Manager serves as Salt Lake County’s Privacy Officer, leading Countywide data privacy initiatives to ensure compliance with the Government Data Privacy Act (GDPA) and related requirements. The role develops and oversees a comprehensive privacy program, promotes ethical and responsible data use and sharing, and assesses privacy risks associated with new technologies, legislative changes, and data-sharing partnerships while balancing legal compliance with public transparency.

Bachelor’s degree from an accredited college or university in Public Administration, Public Policy, Information Technology, Law, Cybersecurity, or a closely related field, plus three (3) years of professional experience in data privacy, compliance, risk management, or data management OR an equivalent combination of related education and experience. Must possess or be able to obtain a professional privacy certification (e.g., CIPP/US, CIPT, or CIPM) and complete privacy-related trainings/workshops offered by the Utah State Office of Data Privacy within one (1) year of hire.

In addition to the required certification and training, the candidate must be familiar with the GDPA and Utah Government Records Access and Management Act (GRAMA) requirements. Due to the nature of this position, the successful applicant must pass a required background check through fingerprinting and enrollment in the continuous RAP Back (Record of Arrest and Prosecution Back) program in accordance with current County Human Resources policy requirements.

• Manages Countywide privacy functions and responsibilities in accordance with the Utah Government Data Privacy Act (GDPA).
• Establishes and maintains Countywide privacy policies, standards, procedures, and templates to ensure compliance with federal and state laws (including GDPA, GRAMA, HIPAA, PCI, CJIS Compliance, and other related data and privacy governance laws).
• Supports and coordinates responsible data sharing activities within the County and with external partners in alignment with applicable laws, policies, and standards.
• Prepares strategies and implementation plans to catalog County data, identify high-risk processing activities, and document data sharing, selling, and purchasing activities.
• Partners with agency data coordinators to ensure privacy, transparency, and ethical data use are systematically integrated into agency operations, data sharing practices, program evaluations, and technology solutions.
• Designs and delivers privacy training programs for County employees to ensure compliance with the GDPA and to foster a culture of data stewardship.
• Establishes and manages Countywide processes to ensure privacy notices are issued and kept current for all programs and services that collect or use personal data, including website privacy notices.
• Ensures third-party contracts include and enforce provisions requiring compliance with Utah’s GDPA for any vendor with access to County personal data.
• Develops protocols for individual or…