THECB - General Counsel II (Chief Privacy Officer)

Job Description

THECB is observing a hybrid telecommuting schedule with employees required to be in the office at least two (2) days per week.

The agency is located at the George Herbert Walker Bush State Building located in the Capitol Complex at 1801 N. Congress Ave. Austin, TX 78701.

General Description:

The Texas Higher Education Coordinating Board (Coordinating Board) is seeking an attorney with experience in data privacy and cybersecurity to join the agency as the Chief Privacy Officer in its quest to change the future of Texans and Texas through the power of higher education. The Coordinating Board provides leadership and coordination across Texas colleges and universities. As part of its mission, the Coordinating Board collects and analyzes data to provide institutions of higher education with the tools to best serve their students. The agency uses financial resources and data-driven tools to drive improvement of individual student achievement and economic performance across the state and is working diligently to help Texans and Texas recover from the economic hardship caused by the pandemic.

The Privacy Officer performs highly advanced privacy analysis work. Work involves coordinating the review and monitoring of controls over confidential and sensitive data to prevent unauthorized disclosure; developing, implementing, and maintaining policies and procedures; monitoring program compliance; making recommendations to securely implement new IT programs and services; investigating and tracking of incidents and breaches; and ensuring compliance with federal and state laws. Work is performed under minimal supervision with extensive latitude for the use of initiative and independent judgment. The Privacy Officer will handle a high volume of work with significant latitude for independent judgment. The ideal candidate will possess a deep knowledge of the Federal Educational Rights Privacy Act (FERPA). This position reports to the General Counsel and works closely with leadership throughout the agency.

General Duties and Responsibilities:

• Serves as the THECB's privacy officer for all privacy issues.

• Monitor, review and/or update agency policies governing the following:

o Internal access and use of Federal Educational Rights Privacy Act (FERPA) and other confidential data by employees and contractors.

o Access and use of de-identified data by external entities, including guidance on acceptable de-identification or anonymization.

o Data breach reporting and response processes.

o Access and use of FERPA confidential data by researchers; and

o Training necessary for employees in roles integral to data privacy

• Review and approve authorizing data sharing agreements with other governmental bodies (including Tri-Agency); private and public institutions of higher education; and school districts.

• Review contract provisions authorizing disclosure of FERPA confidential information under permissible exceptions.

• Create and review policies governing access and use of agency data.

• Review policies around responses to Public Information Act requests (PIR) and other external requests for aggregate or anonymized information.

• Create and provide guidance on the implementation of data projects.

• Coordinate and/or review data security and privacy controls and recommend compliance measures.

• Provide counsel on permissible use of Free Application for Federal Student Aid (FAFSA) data and other data governed by the Higher Education Act (HEA).

• Interface with the Privacy Technical Assistance Center, as needed.

• Provide guidance on the applicability of all privacy laws, as needed.

• Works closely with the Agency's Chief Information Security Officer regarding current and evolving privacy and security issues.

• Monitor, analyze, and review privacy-related legislation.

• Consult with other program areas for assessment of threats to information privacy.

• May prepare reports on privacy analysis for the agency.

• Advise Data Governance Council to establish and support data safeguarding and governance processes that appropriately address privacy compliance risks including audit findings.

• Perform other duties as assigned.

Knowledge, Skills, and Abilities:

• Knowledge of privacy and information security standards, of process development, and of project management theories and practices.

• Knowledge in state and federal privacy laws, including but not limited to FERPA and HEA.

• Skill in conducting research, in diagramming business process flows, and in the use of a computer and applicable software.

• Demonstrated organization, facilitation, written and oral communication, and presentation skills.

• Skills in collaboration, teamwork, and problem-solving to achieve goals.

• Excellent writing skills.

• Ability to identify and resolve problems, to maintain confidentiality and protect privacy, to develop and implement policies and procedures, and to supervise the work of others.

• Ability to adhere to the agency's internal management policies and procedures.

Military Crosswalk:Military Crosswalk for Occupational Category - Legal (texas.gov)



Qualifications:

Required Minimum Education and Experience:

• J.D. from accredited law school and Bachelor's degree from an accredited college or university.

• Five years full time experience as a licensed, practicing attorney. Years of experience as a Certified Information Privacy Professional (CIPP) may substitute for years of experience as a licensed, practicing attorney.

• Experience in state and federal privacy laws, including but not limited to FERPA.

• Experience in privacy analysis, information security, or process management work.

Preferred:

Preferred:

• Three years' experience in data privacy and/or cybersecurity.

• Certified Information Privacy Professional (CIPP).

• Three years' experience directly relevant experience working for an institutional of higher education or other state agency handling confidential Personally Identifiable Information (PII).

• Knowledge and experience with the Higher Education Act of 1965.

Physical Requirements and/or Working Conditions:

Work is performed in a standard office environment and requires:

• Regular, reliable, and punctual attendance at work;

• Frequent use of personal computer, copiers, printers and telephones;

• Frequent sitting;

• Frequently works under deadlines, as a team member, and in direct contact with others.

Workforce:

Must be able to:

• Demonstrate knowledge of customer service deliverables.

• Show flexibility and adaptability toward changes in assignments and work schedules, working extended hours as necessary.

• Adhere to the organization's internal management policies and procedures.

• Contribute to the agency's performance measures and mission.

Application Requirements:

The Texas Higher Education Coordinating Board is an Equal Opportunity Employer. A State of Texas application is required to apply. For more information on how to apply for this position, go to the Coordinating Board's employment opportunities website at Careers - Texas Higher Education Coordinating Board

The Texas Higher Education Coordinating Board participates in E-Verify for each new employees' Form I-9 to confirm work authorization. For questions, please call the HR Department at 512-427-6190. For vocal and/or hearing assistance call 7-1-1.

Notes to Applicant:

If you require any reasonable accommodation for the interview process, please inform the hiring representative who calls to schedule your interview. This position has been designated as a security sensitive position. A criminal background investigation will be conducted on the final candidate for this position.

Your job application must be completely filled out. Your application must contain dates of employment, job titles, name of employer and a description of duties performed in a way that demonstrates you meet the minimum qualifications for the position for which you are applying. Resumes do not take the place of the requirement to include this information on the application. If this information is not submitted, your application may be rejected because it is incomplete.

Veterans Information: THECB is committed to hiring Veterans. To receive Veteran's Preference, a copy of the FORM DD214 -member #4, must be attached when submitting your application.

AN EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER: THECB does not discriminate on the basis, of race, color, religion, sex, national origin, age, or disability in employment or the provision of services.

Job offer and continuation of employment with THECB is contingent upon:

• Proof of education and experience listed on the application.
• Eligibility/authorization to work in the U.S.
• Satisfactory results from a pre-employment criminal history background check.
• Compliance with the Selective Service Law for males ages 18-25. Please be advised that under Texas law, names and other information concerning applicants or nominees may be subject to disclosure upon request.

THECB does not allow dual employment with other state of Texas agencies or institutions.

Skills assessment may be conducted at time of interview

No phone calls or emails, please. Due to the high volume of applications, we do not accept telephone calls and cannot reply to all email inquiries. Only candidates selected for interview will be contacted.