HIPAA Privacy Officer

HIPAA Privacy Officer

The UT Dallas Office of Institutional Compliance (OIC) is currently hiring a HIPAA Privacy Officer to join our team. The HIPAA Privacy Officer is responsible for developing, implementing, and overseeing the University's HIPAA privacy program; serves as the primary institutional resource on the privacy of protected health information (PHI); and guides the HIPAA Support functional area within OIC. Reporting to the Chief Compliance Officer, this position ensures compliance with applicable federal and state regulations governing PHI, advances privacy-related policy and operational practices, and partners with academic, research, clinical, and administrative units to support compliant operations and mitigate privacy risk. The role coordinates closely with the Office of Legal Affairs on legal matters and with the Office of Information Security on data protection and incident response.

Anticipated Salary Range: $107,000 to $120,000 depending on qualifications.

Successful candidates must meet the minimum requirements for education, experience, knowledge, skills, and abilities for the position.

Education and Experience: Bachelor's degree. Five (5) years of progressively responsible experience in healthcare compliance, privacy, or a related regulatory field, with a focus on privacy, data protection, and applicable federal and state regulations; or an equivalent combination of education and experience.

Core Competencies (required knowledge, skills, and abilities): Analytical and Problem-Solving: Strong analytical, investigative, and problem-solving skills, with the ability to analyze complex data, identify patterns and trends, make data-driven decisions, interpret regulations, and translate requirements into effective and practical operational solutions. Communication and Interpersonal: Strong written and verbal communication skills, with the ability to effectively engage stakeholders, legal teams, and external agencies and to foster collaboration, build partnerships, and achieve shared objectives. Organization and Planning: Demonstrated ability to develop strategies and objectives; prioritize and manage multiple tasks effectively; ensure accuracy in documentation and data; follow established procedures; and consistently deliver timely, high-quality work.

Position Specific: In-depth knowledge of the HIPAA Privacy, Security, and Breach Notification Rules and related healthcare privacy and data protection frameworks, with the ability to stay current on regulatory changes. Knowledge of applicable federal and state privacy laws and requirements. Strong negotiation skills with the ability to effectively work with vendors, business associates, and other entities handling healthcare data. Demonstrated high ethical standards and sound judgment in protecting privacy and data security. Proficiency in interpreting and applying federal and state regulations and organizational policies. Proficiency with Microsoft Office Suite (or similar tools) and experience reporting statistical data. Professionalism: Demonstrated integrity, sound judgment, and discretion. Ability to maintain confidentiality, treat others with respect and consideration, take accountability for actions, and follow through on commitments.

Note: All applicants are required to submit a resume and a cover letter demonstrating how the applicant meets the minimum qualifications, required competencies (knowledge, skills, and abilities), and preferred qualifications.

Minimum Education and Experience - Bachelor's degree and 5 years of related progressive experience.

Preferred Education and Experience: Advanced degree (e.g., J.D., MHA, MPH) from an accredited institution. Certified Information Privacy Professional (CIPP) or similar credential. Experience working in higher education, healthcare, government, or large, decentralized organizations. Experience reviewing or negotiating Business Associate Agreements and other privacy-related contractual terms. Knowledge of general higher education policy and practices and the ability to navigate complex institutional structures and processes.

Other Qualifications - To the extent this position requires the holder to research, work on, or have access to critical infrastructure as defined in Section 117.001(2) of the Texas Business and Commerce Code, the ability to maintain the security or integrity of the critical infrastructure is a minimum qualification to be hired and to continue to be employed in the position.

Essential Duties and Responsibilities: Policy Development and Implementation. Develops, updates, implements, and enforces policies and procedures governing the privacy of PHI to ensure ongoing compliance with HIPAA and related privacy regulations, accounting for evolving technology, business practices, and the regulatory environment. Regulatory Monitoring and Analysis. Monitors new and proposed legislation, regulatory developments, and industry best practices; evaluates institutional impact; and, in coordination with the Office of Legal Affairs and relevant stakeholders, recommends and implements necessary changes. Privacy Guidance. Provides authoritative guidance to university departments and leadership on privacy requirements, risk mitigation, and the appropriate use and disclosure of PHI; operationalizes processes to foster compliance with privacy-related laws, regulations, policies, and contractual obligations. Refers matters requiring legal interpretation to the Office of Legal Affairs. Business Associate Agreements. Reviews, negotiates, and maintains Business Associate Agreements (BAAs) and related contractual privacy provisions, coordinates with the Office of Legal Affairs and Office of Budget and Finance to ensure appropriate privacy protections with partners and vendors, and maintains the University's template BAA. Training and Awareness. Develops and delivers training and awareness programs so that the workforce and affiliated personnel understand their responsibilities for safeguarding PHI and their privacy obligations. Privacy Risk and Impact Assessments. Conducts privacy risk and impact assessments for systems, software, vendors, and initiatives involving PHI, particularly during procurement of new technologies; identifies vulnerabilities and recommends corrective actions. Compliance Monitoring and Reviews. Establishes and performs ongoing compliance monitoring and periodic reviews to assess adherence to privacy requirements and to identify areas requiring corrective action. Investigations and Privacy Rights. Investigates complaints, incidents, and potential breaches involving PHI; develops strategies to resolve identified issues; and ensures that requests relating to individual privacy rights, including complaints, PHI access requests, opt-outs, and requests for an accounting of disclosures, are handled appropriately and efficiently. Breach and Incident Response. Coordinates breach response and required notifications; develops and implements incident response plans to address breaches or unauthorized disclosures of PHI promptly; and contributes privacy risk analysis to institutional and UT Dallas security incident response efforts. Cross-Functional Collaboration. Collaborates with Information Security, the Office of Legal Affairs, Human Resources, and other stakeholders, including UT Dallas compliance and privacy partners, to support data governance, vendor risk management, and a comprehensive approach to privacy and security. Performs other duties as assigned.

Additional Information: This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position. Duties may change as organizational needs evolve.

Physical Demands and Working Conditions: Work is primarily sedentary and performed in a standard office environment. The noise level is quiet to moderate. Frequent use of standard office equipment, including a computer/laptop (keyboard, monitor, and mouse), printer, copier, calculator, and telephone (or virtual equivalent). Work environment includes frequent interruptions, with a moderate to high stress level. Frequent communication through a variety of methods and collaboration with multiple departments, as well as individuals and groups. Ability to remain stationary at a computer for extended periods. May be required to move about the office and travel moderate distances around campus to attend meetings and events. May require occasional after-hours response to incidents.

Physical Activities

Working Conditions

About Us The University of Texas at Dallas is a public research university located in one of the nation's fastest-growing metropolitan regions. UT Dallas is a place that welcomes and encourages members of its community in their pursuit of excellence. Visit About UTD for more information. The Office of Institutional Compliance (OIC) provides faculty, staff, and students with resources and tools to support success in fulfilling the University's institutional compliance responsibilities across its functional areas: Compliance Support, Clery Support & Prevention Education, Equal Opportunity & Title IX, HIPAA Support, and the Youth Protection Program, in accordance with internal policies and procedures and applicable federal and state laws and regulations. We work with campus partners to foster and maintain a productive, compliant, and welcoming environment that is respectful and free from discrimination and retaliation, promoting student success and supporting a strong Comet community at UT Dallas. Visit our department's website for more information.

Work Schedule Regular working hours are 8:00 a.m. to 5:00 p.m. Monday through Friday. This role may be eligible for a hybrid (partly remote/partly in-office) work schedule, subject to business need and manager approval. Individuals must live in the Dallas-Fort Worth area and have the ability to be on campus for work activities as scheduled and/or with notice. A UT Dallas Remote Work Agreement will be required within 14 days after approval.

What We Can Offer UT Dallas is an Equal Opportunity Employer with an employee-friendly and supportive work environment. Our comprehensive compensation and benefits package that is effective as of your hire date includes: Competitive Salary Tuition Benefits BCBS PPO Medical Insurance Options including 100% paid employee medical coverage for full-time employees AD&D Insurance Dental & Vision Plan Options Long and short-term disability TRSRetirement Plan Fertility Benefits Paid time off All UT Dallas employees have access to various professional development opportunities, including a membership to Academic Impressions, LinkedIn Learning, and UT Dallas Bright Leaders Program. Visit for more information.

Special Instructions Summary - How to Apply: To be considered for this position, all applications must be submitted online through UTD Jobs. Incomplete applications or materials will not be considered. Applicants must submit: A cover letter that outlines how their education, experience,