Senior Data & AI Compliance Specialist

Overview

Senior Data & AI Compliance Specialist — Full Time, UCSF IT. The Senior Data & AI Compliance Specialist will be responsible for supporting the operations of the data & AI compliance functions for teams within the Information Technology department to ensure that data & AI solutions are managed, administered, released, and shared in accordance with UCSF and UCOP security, privacy, and compliance policies and state and federal laws.

• Enterprise Data Request Process (EDRP) Operational Support: provide level 2 support to Enterprise reporting teams, troubleshoot issues, test enhancements to the Enterprise Data Request Form and workflow, generate user documentation, and configure metadata in Service Now EDRP tables. Requires knowledge of clinical and informatics workflows to support data access processes.
• Data Sharing Review Concierge Services: facilitate intake of data sharing review requests, meet with UCSF constituents and Contracting Officers, gather complete information and documentation, complete the Safety Net Submission Form, track follow-up actions, and coordinate with SMEs as needed (Export Control, AI Governance, Risk, Faculty, etc.).
• Data Sharing Review Technical Support: maintain Safety Net Submission Form and records in SharePoint and Box; enhance the form to reflect current institutional requirements; partner with SharePoint team to resolve level 3 issues; maintain and enhance AI solutions to provide compliance guidance via UCSF AI tools (e.g., Versa).
• Data Analysis of Operational Metrics: extract and analyze data related to operational activities to generate management metrics as needed.
• Maintenance of Data & AI Compliance Web Content: implement and update web content about data & AI compliance; in-depth knowledge of Drupal required.
• Level 2 Data Compliance, Intake, & AI Support: advise and consult with UCSF Community on data compliance, data sharing, AI, and service request intake; escalate to Associate Director as needed; collaborate with governance groups (Privacy Office, IT Security & Policy, IRB) and informatics teams on complex concepts.
• Lead working groups for data compliance initiatives as needed; write user and operational documentation and process diagrams; customize documentation for target audiences.
• Coordinate intake, review, and project management of data sharing engagements with third parties; ensure accurate communication of engagement specifications and data characteristics; apply HIPAA de-identification standards and classify dashboards prior to publication.

• Bachelor’s degree in Health Care Administration, Business Administration, Information Systems, or related field; minimum 5 years in health care
• 3–5 years in informatics, research data analysis or reporting, or health care data management
• 3+ years of information systems application support via ITIL or SDLC
• 2–4 years managing complex technical or compliance projects
• 1–3 years documenting processes with workflow diagrams and user documentation
• 1–3 years analyzing policy/state/federal law requirements for operational practice and solutions
• 1–3 years web content management (e.g., Drupal)
• Expert-level knowledge of HIPAA Privacy and Security rules
• Strong problem-solving, judgment, and attention to detail
• Knowledge of FERPA and ability to manage student information per regulations
• Ability to clearly communicate complex compliance information to technical teams, leadership, and customers
• Discretion and ability to handle PHI, RHI, and PII
• Strong customer service skills and ability to meet deadlines
• Experience drafting management presentations (PowerPoint)
• Familiarity with health care/research workflows
• Knowledge of HIPAA Safe Harbor and Expert Determination data de-identification standards

• Registered Nurse or licensed healthcare professional
• Six Sigma Black Belt
• Project Management certification
• Master’s degree in Health Sciences or related field
• Experience with IT service management platforms (e.g., Service Now)
• Experience drafting healthcare or research data management policies
• SharePoint administration experience
• Experience generating operational metrics and…