DATA STEWARDSHIP & PRIVACY SUPERVISOR

Data Stewardship & Privacy Supervisor

The Data Stewardship & Privacy Supervisor oversees countywide records governance and serves as the primary IT privacy leader, ensuring Snohomish County's data handling practices meet federal, state, and local requirements. The role manages the Records Center's operational activities-including intake, storage, access, disposition, and archival transfer-and provides strategic guidance on privacy controls, incident response, retention practices, and compliance initiatives. In addition, this position leads coordination with departmental records contacts and external partners, ensuring defensible records management practices and consistent privacy implementation across programs.

This role also partners closely with technology teams to evaluate emerging system capabilities, assess privacy and records risk, and implement countywide improvements to data protection. Strong communication, relationship-building, and program-coordination skills are essential, as the supervisor routinely interfaces with IT leadership, departmental stakeholders, and external agencies to align operational practices with evolving regulatory requirements.

STATEMENT OF ESSENTIAL JOB DUTIES

1. Ensures safety and integrity of physical record inventory assigned to the custody and control of the IT records center. Develops, executes, and ensures operation of efficient and effective inventory control systems including physical records intake, movement, storage of and access to paper and media records, and defensible records destruction for all county departments.
2. Serves as a county liaison with the state division of archives and records management. Utilizes the State of Washington records retention schedules to recommend retention schedules for specific documents; assists in advising and reviewing interpretation of state records retention schedules for department contacts. Researches and resolves records management issues and concerns. Identifies, collects, and transfers historic, archival and security records to state archives.
3. Plans, organizes, supervises, and evaluates the work of subordinate employees; recommends the hiring, discipline, transfer, promotion, and termination of employees as necessary.
4. Specifies, acquires, develops, organizes, implements, and maintains comprehensive records management software and manual systems, including a records retrieval system for county records and documents transmitted to the records center for custody.
5. Determines and monitors unit strategies, goals, and objectives; prepares the unit's annual budget; coordinates and plans physical space and inventory resource requirements.
6. Ensures compliance with policy regarding IT department responses to public records requests through overseeing unit work effort and providing direction and support. Routinely collaborates with county public records officer to prioritize outstanding requests.
7. Develops and maintains county data privacy programs and associated policies, procedures, authorization forms and notices to advance the county's competency in data privacy across all channels, work streams, and data lifecycle stages. Routinely monitors and ensures county compliance with data privacy policy, assists in response to data privacy incidents, and data security breach, identifying adjustments needed to reduce future exposure.
8. Serves on records committees within the county; leads IT community of department records coordinators with guidance relating to records retention and centralized records storage.
9. Partners with IT technical and department project staff and the County-wide Privacy Officer to ensure IT system solutions are configured to provide the appropriate level of data protection to meet established policy requirements and provide recommendations for internal controls that may be needed to prevent gaps in technical system capability. Works closely with technology teams to evaluate and anticipate potential privacy concerns embedded in the use of emerging technologies.
10. Supervises the destruction of public records as authorized by the State Records Act.
11. Designs, develops and provides regular training programs, documentation, outreach, and support for county department contacts relating to archival records management and data privacy and protection policies and best practices, promoting a culture of strong privacy controls for county departments, offices, and courts.
12. Works with third-party stakeholders such as IT business partners, suppliers, service providers and vendors to ensure that they clearly understand and comply with county privacy requirements when doing business with the county.
13. Acts as county liaison with other records and data privacy personnel in state and local government, industry and the academic community, regularly consulting and working to remaining current in records management and data privacy and protection legislation, technology and best practices through training, research, networking and review of professional publications.
14. Serves as the IT data privacy officer, establishing procedures related to data privacy and protection, and recommending county policies related to data privacy and protection, evaluating both policy and procedure against current and anticipated legislation.
15. Conducts internal and external ecosystem data privacy compliance assessments and audits ensuring business units, technology teams, vendors, and ecosystem partners meet data privacy and permissible use requirements; develop mitigation plans for non-compliant areas.
16. Communicates with IT leadership, executive's office, and other stakeholders on county data privacy practices in data protection and provides strategic consulting and advice on privacy program design for county departments, offices, and courts.

STATEMENT OF OTHER JOB DUTIES

1. Performs related duties as required.

Minimum Qualifications

Bachelor's Degree in computer science, records or information management, business administration, law or closely related field; PLUS, four (4)years' experience in records management, public records act (FoIA), data privacy or related work; one (1) year lead or supervisory experience is required; OR, any equivalent combination of training and/or experience that provides for the required knowledge and abilities. Experience leading or supervising in records or IT role is preferred. Technical training or knowledge of Washington State records retention schedule is preferred. Must pass job related tests.

SPECIAL REQUIREMENTS

Must successfully pass a background investigation.

A valid Washington State Driver's License is required.

Certified Records Manager designation ( or ability to obtain within one year.

Certification in one or more of the following or ability to obtain within one year:

• Certified Information Professional (CIP)
• Certified Information Privacy Professional and Manager (CIPP, CIPM)
• Information Governance Professional Certification (IGP)
• Certified Data Management Professional (CDMP)

When assigned to the Department of Information Technology :

Candidates for employment must successfully pass a criminal background investigation, which includes fingerprinting.