HIPAA Privacy Officer

Job Summary The UT Dallas Office of Institutional Compliance (OIC) is hiring a HIPAA Privacy Officer to develop, implement, and oversee the University’s HIPAA privacy program. The officer serves as the primary institutional resource on the privacy of protected health information (PHI) and guides the HIPAA Support functional area within OIC. Reporting to the Chief Compliance Officer, the position ensures compliance with federal and state regulations governing PHI, advances privacy‑related policy and operational practices, and partners with academic, research, clinical, and administrative units to support compliant operations and mitigate privacy risk. Essential Duties and Responsibilities Policy Development and Implementation. Develops, updates, implements, and enforces policies and procedures governing the privacy of PHI to ensure ongoing compliance with HIPAA and related privacy regulations. Regulatory Monitoring and Analysis. Monitors new and proposed legislation, regulatory developments, and industry best practices; evaluates institutional impact; and, in coordination with the Office of Legal Affairs, recommends and implements necessary changes. Privacy Guidance. Provides authoritative guidance to university departments and leadership on privacy requirements, risk mitigation, and the appropriate use and disclosure of PHI; operationalizes processes to foster compliance with privacy‑related laws, regulations, policies, and contractual obligations. Business Associate Agreements. Reviews, negotiates, and maintains Business Associate Agreements (BAAs) and related contractual privacy provisions; coordinates with the Office of Legal Affairs and Office of Budget and Finance to ensure appropriate privacy protections with partners and vendors. Training and Awareness. Develops and delivers training and awareness programs so that the workforce and affiliated personnel understand their responsibilities for safeguarding PHI. Privacy Risk and Impact Assessments. Conducts privacy risk and impact assessments for systems, software, vendors, and initiatives involving PHI, identifying vulnerabilities and recommending corrective actions. Compliance Monitoring and Reviews. Establishes and performs ongoing compliance monitoring and periodic reviews to assess adherence to privacy requirements and identify areas requiring corrective action. Investigations and Privacy Rights. Investigates complaints, incidents, and potential breaches involving PHI; develops strategies to resolve identified issues; and ensures that requests relating to individual privacy rights, including complaints, PHI access requests, opt‑outs, and requests for an accounting of disclosures, are handled appropriately and efficiently. Breach and Incident Response. Coordinates breach response and required notifications; develops and implements incident response plans; and contributes privacy risk analysis to institutional and UT Dallas security incident response efforts. Cross‑Functional Collaboration. Collaborates with Information Security, the Office of Legal Affairs, Human Resources, and other stakeholders, including UT Dallas compliance and privacy partners, to support data governance, vendor risk management, and a comprehensive approach to privacy and security. Performs other duties as assigned. Minimum Education and Experience Bachelor’s degree and 5 years of related progressive experience in healthcare compliance, privacy, or a related regulatory field. Preferred Education and Experience Advanced degree (e.g., J.D., MHA, MPH) from an accredited institution. Certified Information Privacy Professional (CIPP) or similar credential. Experience working in higher education, healthcare, government, or large, decentralized organizations. Experience reviewing or negotiating Business Associate Agreements and other privacy‑related contractual terms. Knowledge of general higher education policy and practices and the ability to navigate complex institutional structures and processes. Essential Competencies Analytical and Problem‑Solving. Strong analytical, investigative, and problem‑solving skills, with the ability to analyze complex data, identify patterns and trends, make data‑driven decisions, interpret regulations, and translate requirements into effective operational solutions. Communication and Interpersonal. Strong written and verbal communication skills; ability to engage stakeholders, legal teams, and external agencies and foster collaboration. Organization and Planning. Ability to develop strategies and objectives, prioritize and manage multiple tasks effectively, and deliver timely, high‑quality work. Position‑Specific Knowledge. In‑depth knowledge of HIPAA Privacy, Security, and Breach Notification Rules and related healthcare privacy and data protection frameworks; knowledge of applicable federal and state privacy laws and requirements; negotiation skills with vendors and business associates; high ethical standards; proficiency with Microsoft Office Suite and reporting statistical data. Professionalism. Demonstrated integrity, sound judgment, and discretion; ability to maintain confidentiality and treat others with respect and consideration. Other Qualifications To the extent this position requires the holder to research, work on, or have access to critical infrastructure as defined in Section 117.001(2) of the Texas Business and Commerce Code, the ability to maintain the security or integrity of the critical infrastructure is a minimum qualification to be hired and to continue to be employed in the position. Physical Demands and Working Conditions Work is primarily sedentary in a standard office environment. Noise level is quiet to moderate. Frequent use of standard office equipment, including computer, printer, copier, calculator, and telephone or virtual equivalent. Work environment includes frequent interruptions and moderate to high stress level. Frequent communication through various methods and collaboration with multiple departments. Ability to remain stationary at a computer for extended periods. May be required to move around the office and travel moderate distances around campus. May require occasional after‑hours response to incidents. Benefits Competitive Salary Tuition Benefits Health Insurance Options with 100% employee coverage for full‑time employees AD&D Insurance Dental & Vision Plan Options Long‑term and short‑term disability insurance TRS Retirement Plan Fertility Benefits Paid time off Professional development opportunities, including access to Academic Impressions, LinkedIn Learning, and the UT Dallas Bright Leaders Program EEO Statement UT Dallas is an Equal Opportunity Employer. The University does not discriminate on the basis of race, color, religion, sex (including pregnancy), sexual orientation, gender identity, gender expression, age, national origin, disability, genetic information, or veteran status in its services, programs, employment, or education. UT Dallas is committed to providing an educational, living, and working environment that is welcoming, respectful, and inclusive of all members of the university community. Reasonable accommodations will be provided for individuals with disabilities. For questions regarding nondiscrimination policies, please contact the Title IX Coordinator. For assistance with accommodations during the application process, contact the ADA Coordinator. #J-18808-Ljbffr University of Texas at Dallas