Privacy Compliance Specialist

Title: Privacy Compliance Specialist Location: Midtown Org Unit: Administration Work Days: Weekly Hours: 35.00 Exemption Status: Exempt Salary Range: $79,400.00 - $90,600.00 *As required under NYC Human Rights Law Int 1208-2018 - Salary range for this role when Hired for NYC Offices Position Summary Responsible for privacy unit incident timely response tracking, logging, and record keeping. Serves as the tri-partite incident monitor for incidents identified through the tri-partite monitoring system. This role reviews incidents for false positives and conducts preliminary investigations for alleged violations. Incumbent gathers facts and documents investigation steps and information for incident determination. This role is also responsible for research related privacy incidents and serves as the Data Privacy Review Board investigator. Job Responsibilities Monitors incident monitoring system for WCM incidents. Identifies false positives and documents trends. Conducts preliminary investigation for alleged incidents; gathers facts, documents investigation steps and writes summaries for incident determination. May track privacy training activities and prepare reports of training and training delinquencies utilizing various electronic databases. May provide on-going support for new employee and supervisor privacy training and track to ensure that all privacy-related training and meetings are documented. Responsible for the development and implementation of privacy workshops, lectures, and meeting materials. Assists with non-HIPAA incident investigations, policy development and training (GDPR, ACA, FERPA, and NYS). Logs and tracks privacy incidents, calls and emails in WCM's incident management system; updates incidents in real-time and closes incidents timely. Escalates bottlenecks and high-risk incidents in accordance to established workflows. Manages IT/Security related privacy incidents, including but not limited to, lost devices, phi access, Service Now entered privacy incidents, and DLP incidents. Under direction of privacy leadership team, prepares and sends out privacy related correspondence. Reviews privacy policies for accuracy and makes recommendations for updates. Keeps privacy policies updated on website. Manages privacy policy communication program. Reviews and assists with management of accounting of disclosures. Prepares privacy related weekly and monthly metrics for leadership. Reviews and manages Care Everywhere access logs. Performs other related duties as assigned. Education Bachelor's Degree Experience Approximately 2 years of prior related work experience. Knowledge, Skills and Abilities Detail oriented with strong organizational and time management skill with the ability to prioritize and manage the completion of multiple tasks/projects. Strong computer skills (Microsoft Office including Word, Excel, and PowerPoint) and Adobe Acrobat. Strong writing skills. Licenses and Certifications Working Conditions/Physical Demands Cornell welcomes students, faculty, and staff with diverse backgrounds from across the globe to pursue world-class education and career opportunities, to further the founding principle of “any person, any study.” No person shall be denied employment on the basis of any legally protected status or subjected to prohibited discrimination involving, but not limited to, such factors as race, ethnic or national origin, citizenship and immigration status, color, sex, pregnancy or pregnancy-related conditions, age, creed, religion, actual or perceived disability (including persons associated with such a person), arrest and/or conviction record, military or veteran status, sexual orientation, gender expression and/or identity, an individual’s genetic information, domestic violence victim status, familial status, marital status, or any other characteristic protected by applicable federal, state, or local law. Cornell University embraces diversity in its workforce and seeks job candidates who will contribute to a climate that supports students, faculty, and staff of all identities and backgrounds. We hire based on merit, and encourage people from historically underrepresented and/or marginalized identities to apply. Consistent with federal law, Cornell engages in affirmative action in employment for qualified protected veterans as defined in the Vietnam Era Veterans’ Readjustment Assistance Act (VEVRRA) and qualified individuals with disabilities under Section 503 of the Rehabilitation Act. We also recognize a lawful preference in employment practices for Native Americans living on or near Indian reservations in accordance with applicable law. #J-18808-Ljbffr Weill Cornell Medicine