University Chief Privacy Officer

Minimum Education and Experience

• Ten or more years of increasingly responsible privacy program leadership experience.
• Demonstrated, successful experience in a large, complex research-intensive university or academic medical center with substantial research activities required.
• Success operationalizing a privacy program is desired.
• A track record of active and appropriate responses to privacy violation allegations, incidents, and investigations, including working with counsel and stakeholders. Experience with privacy issues related to academic and medical research and health information; knowledge of protection of student information. Expertise in each of HIPAA, FERPA, GDPR, PIPL, and California Civil Code section 1798.82 preferred.
• Experience coordinating activities between a university and hospital is a plus.
• Demonstrated strengths as a team leader in hiring, developing, and managing a high-producing team of privacy experts; experience in managing staff and providing leadership to achieve goals and vision of the organization.
• Demonstrated ability to build successful relationships with a wide range of staff across a complex organization while maintaining the ability to be decisive and forthright in a consensus-driven environment.
• Demonstrated success in educating a range of stakeholders on a comprehensive privacy plan as well as leading active and appropriate responses to a variety of incidents and investigations.
• Bachelor’s degree required. An advanced degree in law (JD), privacy, or a related field preferred.
• Certified Information Privacy Professional designation is a plus.
• Membership and leadership in national privacy organizations are a plus.

Knowledge, Skills, and Abilities

• Expert knowledge of state, federal, and international privacy statutes, laws and regulations, industry standards, trends, and regulatory requirements. Working knowledge of industry-accepted privacy and security frameworks.
• Ability to understand, research, analyze, interpret, and apply complex federal, state, and international privacy laws, rules, regulations, and guidelines and constantly changing risk profiles and evolution.
• Knowledge of academic research environment and risks, and comfort in navigating the intersection of research, clinical data, and privacy.
• A thorough understanding of industry best practices in privacy and demonstrated success in strategic planning, program evaluation, and improvement to create and implement a vision for privacy operations.
• Ability to lead and motivate others and earn the respect of colleagues at all levels.
• Excellent strategic skills to craft and lead implementation of organizational strategies and plans for campus-wide initiatives.
• Highly effective written, oral, and interpersonal communication skills to address a variety of sophisticated audiences.
• Proven presentation experience and comfort with senior leadership audiences. Effective facilitation skills with diverse groups.
• Exceptional interpersonal, negotiation, and political acumen skills. Able to influence people, solve problems, troubleshoot, think creatively, and resolve conflicts.
• Comfortable with ambiguity and lack of clarity; a flexible approach to problem solving and an understanding of the dynamic and emerging nature of privacy.
• Strong project management skills to effectively manage multiple ongoing projects and coordinate activities among many significant stakeholders.
• Dedication to treating both internal and external stakeholders as clients, while maintaining a flexible customer service approach and orientation that emphasizes service satisfaction and quality.
• Demonstrated ability to effectively prioritize work and meet deadlines in a fast-paced environment.
• Digital proficiency and sound business judgment.
• Enthusiasm for “privacy by design” practices and privacy engineering; agile; appreciation for the complexity of how information flows.
• Driven by metrics and outcomes, with success in implementing evidence-based changes.
• Understanding that this privacy leadership role does not involve the practice of law, which is a function performed by Stanford’s Office of the General Counsel.
• Ability to passionately model and demonstrate consistently high standards of professional ethics, integrity, and trust embodied in the values, philosophy, mission, and vision of Stanford University.

WORKING CONDITIONS:

Remote work arrangements may be considered.

The job duties listed are typical examples of work performed by positions in this job classification and are not designed to contain or be interpreted as a comprehensive inventory of all duties, tasks, and responsibilities. Specific duties and responsibilities may vary depending on department or program needs without changing the general nature and scope of the job or level of responsibility. Employees may also perform other duties as assigned.

Consistent with its obligations under the law, the University will provide reasonable accommodation to any employee with a disability who requires accommodation to perform the essential functions of the job.

Stanford is an equal employment opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.

This role is open to candidates anywhere in the United States. Stanford University has five Regional Pay Structures. The compensation for this position will be based on the location of the successful candidate. The expected pay range for this position is $200,000 to $272,000 per annum/hour.
Stanford University provides pay ranges representing its good faith estimate of what the university reasonably expects to pay for a position. The pay offered to a selected candidate will be determined based on factors such as (but not limited to) the scope and responsibilities of the position, the qualifications of the selected candidate, departmental budget availability, internal equity, geographic location, and external market pay for comparable jobs.