Manager – Privacy Programs

The manager, privacy programs report to the Institutional Compliance and Privacy Office and plays a critical role in supporting the institution's Enterprise Privacy Program through privacy consultation, investigations, risk assessments, compliance monitoring, workforce education, and emerging technology reviews. Under the direction of the Privacy Director, the manager, privacy programs provides operational leadership and subject matter expertise across healthcare, academic, research, and administrative environments. Successful individuals in this role will help promote a culture of privacy compliance, and ensure compliance with all applicable university policies, privacy laws, and regulations governing higher education, research, and healthcare.

• Advanced knowledge of HIPAA, HITECH, FERPA, 42 CFR Part 2, research privacy requirements, AI, and applicable federal and state privacy laws, regulations, and industry standards governing the protection of sensitive data.
• Familiarity with NIST Privacy Framework, NIST AI Risk Management Framework, data governance principles, and emerging technology review processes.
• Strong understanding of privacy and data protection considerations associated with artificial intelligence (AI) and emerging technologies.
• Experience conducting privacy investigations, risk assessments, compliance reviews, and incident response activities involving healthcare, academic, and research data.
• Experience working with electronic health record systems and related information systems; experience with Epic is preferred.
• Excellent analytical, organizational, and problem-solving skills with the ability to evaluate information and identify risks while prioritizing competing demands.
• Strong verbal, written, and interpersonal communication skills, including the ability to develop reports, policies, educational materials, and awareness communications.
• Ability to effectively collaborate with executive leadership, faculty, researchers, clinicians, students, workforce members, operational departments, and external stakeholders.
• Demonstrated ability to take initiative, exercise sound judgment, and advance complex projects while providing responsive, solution-oriented support to stakeholders.
• Ability to commute to various UTHSA locations within a 50-mile radius of the University campus.
• Bachelor's degree is required.
• Industry-recognized AI certification required.

• Manage the day-to-day operations of the enterprise Privacy Program, providing oversight and direction across privacy consultations, investigations, compliance monitoring, risk assessments, and policy development.
• Oversee and direct the review and investigation of privacy incidents involving patient, student, research, and other confidential information, ensuring appropriate remediation, mitigation, and reporting.
• Analyze privacy trends and data metrics to drive continuous process improvements, mitigate privacy risks, and strengthen enterprise privacy controls.
• Serve as a privacy subject matter expert, providing authoritative guidance on HIPAA, FERPA, HITECH, research privacy requirements, AI, and applicable federal and state privacy laws and regulations.
• Partner strategically with faculty, researchers, clinicians, administrators, and operational leaders to proactively identify privacy risks and establish practical, scalable compliance solutions.
• Lead privacy consultation strategy regarding the application of HIPAA, FERPA, research privacy standards, enterprise policies and privacy-by-design principles to reviews involving artificial intelligence, machine learning, predictive analytics, generative AI, digital health tools, and other emerging technologies.
• Oversee privacy-focused risk assessments and reviews for technology implementations that utilize patient, student, research, or institutional information within vendor-provided technologies, software platforms, cloud-based solutions, and AI-enabled tools.
• Monitor and evaluate evolving federal and state laws, regulatory guidance, enforcement trends, industry frameworks, and best practices related to AI and privacy to ensure organizational readiness and compliance.
• Direct the development and delivery of comprehensive privacy training (in-person or virtual), educational resources, guidance documents, FAQs, newsletters, and awareness communications for workforce members, students, faculty, researchers, and institutional stakeholders.
• Lead the development, implementation, and maintenance of enterprise privacy policies, procedures, standards, and operational guidance.
• Drive and promote a strong culture of privacy awareness and compliance across the enterprise.
• Collaborate and align with Legal Affairs, Information Security, Human Resources, Internal Audit, Academic Affairs, Research Administration, and operational leadership to support and advance enterprise privacy objectives.
• Oversee/manage the Privacy Analysts of Privacy Programs.
• Other duites as assigned.