Privacy Program Manager

Overview The Vice President of Compliance and Privacy is currently hiring for a Privacy Program Manager . This position oversees the management, coordination, and assessment of the University's data‑privacy activities, directing the University‑wide privacy program in alignment with federal, state, and international privacy requirements and serves as Auburn University's HIPAA Privacy Officer. Collaborates with decentralized privacy functions to strengthen institutional privacy strategy, policies, best practices, and contractual safeguards; plans and delivers training programs; consults with departments to enhance internal processes and reduce risks associated with data‑privacy incidents; and promotes a strong culture of data stewardship, accountability, and ethical compliance across the University. Responsibilities Supports the design, implementation, and ongoing maintenance of the University’s data‑privacy program, including policies, procedures, standards, and operational controls that protect personal and sensitive information across academic and administrative functions. Provides guidance on the development, implementation, and maintenance of University‑wide privacy policies and procedures. Manages data‑breach notification assessments and response activities in accordance with applicable state, federal, and international privacy laws. Reviews software and third‑party vendor requests to ensure compliance with University data‑privacy requirements and to confirm that contractual terms adequately safeguard University data and minimize institutional risk. Manages all activities related to the development, implementation, and maintenance of Auburn’s HIPAA privacy program, including policies, procedures, and core documentation governing the confidentiality and protection of PHI. Conducts and documents recurring training for units with access to ePHI, audits Business Associate Agreements and related workflows, and ensures compliance with HIPAA, the HITECH Act, and applicable state laws. Supports administration of the University’s Electronic Privacy Policy by providing e‑discovery and electronic‑preservation services to the Office of General Counsel, Division of Internal Audit, Research Integrity and Compliance, Athletics Compliance, and external counsel, in accordance with University policy and the Office of Audit, Compliance & Privacy Charter. Provides subject‑matter expertise to the Office of General Counsel regarding the sequestering, securing