Applications are submitted online until the position is filled and/or the posting is closed. After reviewing this job announcement, please click on the link at the bottom of the page to apply online. A resume is required with the application. Further instructions on submission of documents are available in the online application. A resume may not be substituted for an application.

The Data Privacy Manager’s role is to design and develop the County’s Data Privacy Program (“the Program”) and to implement, oversee and enforce the Program’s privacy policies and related procedures within departments under the County Executive. This role involves managing privacy risks, ensuring compliance with data protection laws and regulations, and leading efforts to safeguard personal data handled by various County departments.

This position reports to the Director of Performance and Analytics. 

• Working closely with the senior leaders in the Office of the County Manager, the County’s Department of Information Technology (DIT), the County Solicitor, the County’s Right-to-Know Officer and key County departments (e.g. Human Services, Health, Kane, Jail, Emergency Services, Police, and Human Resources) and others, the Data Privacy Manager will develop and implement a data privacy program and plan, including policies and procedures, that will enable the County to protect the privacy of data assets within County departments in accordance with all relevant laws and regulations, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA), the PA Criminal History Record Information Act (CHRIA), and the PA Right-To-Know Law (RTK).
• In collaboration with the County’s Manager of Enterprise Data and Analytics, the Data Privacy Manager will ensure that data assets are managed in a manner that adheres to privacy and regulatory requirements.
• Monitor and test systems for compliance with policies, roles and data flows.
• Conduct privacy impact assessments and prioritize, resolve and monitor risks to the privacy of County data.
• Evaluate third-party vendors, including Artificial Intelligence (AI) vendors, for compliance with data privacy standards and negotiate data processing agreements.
• Review practices related to the County’s open data program for compliance with data privacy policies and standards. The Data Privacy Manager will also participate in the review and approval process for proposed new open datasets to ensure protection of data privacy.
• Collaborate with DIT to ensure data privacy protection efforts are consistent with DIT’s data security and risk management efforts.
• Recommend, develop, implement, and oversee corrective action and mitigation efforts to address deficient practices and improve privacy and confidentiality compliance.
• Track privacy breaches and work with DIT Office of Risk Management and the County Solicitor through closure.
• Provide expert advice and guidance on privacy to senior management, department directors and data managers and users throughout County government. The Data Privacy Manager will develop and execute data privacy training for County staff.

• Privacy laws in the U.S. and Pennsylvania, particularly as they relate to Allegheny County government, and core concepts central to privacy management and data governance.

• Project planning and management techniques, tools and resources, including Microsoft Office programs, and any other related technology. Experience with data catalog software is a plus.

• Assume leadership and work independently.
• Work with committees or working groups effectively while coordinating activity toward a shared goal.
• Perform regulatory analysis, assess implications and provide multiple recommendations.
• Think strategically and identify proactive measures to strengthen the Program.
• Apply research and analysis, and evaluate programs.
• Demonstrate commitment to public service and improving the operations of government.
• Communicate effectively, both orally and in writing, with an ability to adapt approach, language and style to different audiences.