CAPPS, Inc.

Job Description Your job application must be completely filled out. Resumes do not take the place of the requirement to include this information on the application. Introduction The Texas Higher Education Coordinating Board (THECB) is seeking a strategic Chief Privacy Officer (CPO) to lead, design, and oversee our comprehensive data privacy and protection program. In this role, you will champion the safeguarding of sensitive student, institutional, and agency data across the state's higher education ecosystem. If you are a collaborative team player dedicated to fostering a culture of privacy, compliance, and trust in a datadriven public sector environment, we invite you to help shape the future of Texas higher education. General Description: The Texas Higher Education Coordinating Board (Coordinating Board) is seeking an attorney with experience in Texas administrative law, education law, artificial intelligence, data privacy, data governance and cybersecurity to join the agency as the Chief Privacy Officer in its quest to change the future of Texans and Texas through the power of higher education. The Coordinating Board provides leadership and coordination across Texas colleges and universities. As part of its mission, the Coordinating Board collects and analyzes data to provide institutions of higher education with the tools to best serve their students. The Privacy Officer performs highly advanced privacy and data governance work. Work involves coordinating the review and monitoring of controls over confidential and sensitive data to prevent unauthorized disclosure; developing, implementing, and maintaining policies and procedures; contracting via data sharing agreements, monitoring program compliance; making recommendations to securely implement new IT programs and services; investigating and tracking of incidents and breaches; and ensuring compliance with federal and state laws. Work is performed under minimal supervision with extensive latitude for the use of initiative and independent judgment. The Privacy Officer will handle a high volume of work with significant latitude for independent judgment. The ideal candidate will possess a deep knowledge of the Federal Educational Rights Privacy Act (FERPA). This position reports to the General Counsel and works closely with leadership throughout the agency. General Duties and Responsibilities: Serves as the THECBs privacy officer for all privacy issues. Monitor, review and/or update agency policies governing the following: Internal access and use of Federal Educational Rights Privacy Act (FERPA), GrammLeachBliley Act (GLBA) and other confidential data by employees and contractors. Access and use of deidentified data by external entities, including guidance on acceptable deidentification or anonymization. Data breach reporting and response processes. Access and use of FERPA confidential data by researchers; and Training necessary for employees in roles integral to data privacy Review and approve authorizing data sharing agreements with other governmental bodies (including TriAgency); private and public institutions of higher education; and school districts. Review contract provisions authorizing disclosure of FERPA confidential information under permissible exceptions. Create and review policies governing access and use of agency data and artificial intelligence. Create and provide guidance on the implementation of data projects. Coordinate and/or review data security and privacy controls and recommend compliance measures, including yearly analysis of the Agencys compliance with the Texas Cybersecurity Framework. Provide counsel on permissible use of Free Application for Federal Student Aid (FAFSA) data and other data governed by the Higher Education Act (HEA). Interface with the Privacy Technical Assistance Center, as needed. Provide guidance on the applicability of all privacy laws, as needed. Works closely with the Agencys Chief Information Officer, and Chief Information Security Officer regarding current and evolving privacy and security issues. Monitor, analyze, and review artificial intelligence and privacyrelated legislation. Consult with other program areas for assessment of threats to information privacy. May prepare reports on privacy analysis for the agency. Advise Data Governance Council to establish and support data safeguarding and governance processes that appropriately address privacy compliance risks including audit findings. Perform other duties as assigned. Knowledge Skills or Abilities: Knowledge of privacy and information security standards, of process development, and of project management theories and practices. Knowledge in state and federal privacy laws, including but not limited to FERPA, GLBA and HEA. Skill in conducting research, in diagramming business process flows, and in the use of a computer and applicable software. Demonstrated organization, facilitation, written and oral communication, and presentation skills. Skills in collaboration, teamwork, and problemsolving to achieve goals. Excellent writing skills. Ability to identify and resolve problems, to maintain confidentiality and protect privacy, to develop and implement policies and procedures, and to supervise the work of others. Ability to adhere to the agencys internal management policies and procedures. Required InOffice Days: This position is authorized for a hybrid telework schedule. Employees are required to work in the office two (2) days per week, with the remaining three days eligible for telework. Specific inoffice days may be determined by the department to meet business needs. Military Crosswalk: Qualifications Required Minimum Education and Experience: J.D. from accredited law school and Bachelors degree from an accredited college or university. Five years full time experience as a licensed, practicing attorney. Years of experience as a Certified Information Privacy Professional (CIPP) may substitute for years of experience as a licensed, practicing attorney. Experience in state and federal privacy laws, including but not limited to FERPA. Experience in privacy analysis, information security, or process management work. Preferred: Three years experience in data privacy and/or cybersecurity. Certified Information Privacy Professional United States (CIPP/US). Certified Information Privacy Manager (CIPM) Certified Information Privacy Technologist (CIPT) Artificial Intelligence Governance Professional (AIGP) Three years experience directly relevant experience working for an institution of higher education or other state agency handling confidential Personally Identifiable Information (PII). Knowledge and experience with the Higher Education Act of 1965. Physical Requirements and/or Working Conditions: Work is performed in a standard office environment and requires: Regular, reliable, and punctual attendance at work; Frequent use of personal computer, copiers, printers and telephones; Frequent sitting; Frequently works under deadlines, as a team member, and in direct contact with others. Workforce: Must be able to: Demonstrate knowledge of customer service deliverables. Show flexibility and adaptability toward changes in assignments and work schedules, working extended hours as necessary. Adhere to the organization s internal management policies and procedures. Contribute to the agency s performance measures and mission. Application Requirements: The Texas Higher Education Coordinating Board is an Equal Opportunity Employer. A State of Texas application is required to apply. For more information on how to apply for this position, go to the Coordinating Boards employment opportunities website at . The Texas Higher Education Coordinating Board participates in EVerify for each new employees Form I9 to confirm work authorization. For questions, please call the HR Department at . For vocal and/or hearing assistance call 711. Notes to Applicant: If you require any reasonable accommodation for the interview process, please inform the hiring representative who calls to schedule your interview. This position has been designated as a security sensitive position. A criminal background investigation will be conducted on the final candidate for this position. Your job application must be completely filled out. Your application must contain dates of employment, job titles, name of employer and a description of duties performed in a way that demonstrates you meet the minimum qualifications for the position for which you are applying. Resumes do not take the place of the requirement to include this information on the application. If this information is not submitted, your application may be rejected because it is incomplete. Veterans Information: THECB is committed to hiring Veterans. To receive Veterans Preference, a copy of the FORM DD214 member , must be attached when submitting your application. AN EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER: THECB does not discriminate on the basis, of race, color, religion, sex, national origin, age . click apply for full job details