Data Privacy Specialist (bureau Of Technology) Actively Recruited - Grant Funded

Cook County Offices

Under The President

Administrative Hearings

Auditor

Bureau of Administration

Bureau of Economic Development

Bureau of Finance

Bureau of Human Resources

Bureau of Technology

Facilities

Office of the President

Job Summary

Implements and supports the development of County privacy policies, procedures, and operations to ensure privacy requirements and regulations for the protection of personal information.

Conducts analyses and develops strategies to enhance the privacy program.

Provides training and educational materials related to privacy protection and assists in mitigating risks related to the unauthorized access of sensitive information.

Performs privacy risk assessments, privacy impact assessments and other related documentation.

Collaborates with the Security Operations Center (SOC) and provides management with reports regarding potential risks, threats, vulnerabilities and privacy incidents affecting data.

This position is actively recruited and At Will.

This position is Grant Funded.

Minimum Qualifications

Graduation from an accredited college or university with a Bachelor's Degree or higher is required

AND

Two (2) years of experience in data privacy, information technology (IT), risk management audit, information security or directly related experience is required.

Candidates who are contacted will be required to produce original required documents (e.g., current driver's license, diploma, school transcript, certifications, etc.) listed on the Notice of Job Opportunity within five (5) days of being extended an offer, in writing, by the Bureau Chief of BHR (or designee).

Candidates will be notified of how to submit required documents.



*Degrees awarded outside of the United States with the exception of those awarded in one of the United States territories and Canada, must be credentialed by the World Education Services (WES), Educational Credential Evaluators (ECE) or a National Association of Credential Evaluation (NACES) member organization.

Knowledge, Skills and Abilities

• Knowledge of Information Technology (IT) security theory; technologies; policies; best practices and enterprise architectures.
• Knowledge of the system development lifecycle (SDLC) and the integration of privacy requirements, controls, and risk mitigation strategies throughout the development process.
• Ability to apply analytical reasoning and problem-resolution techniques to address complex business, operational, and privacy-related issues.
• Ability to provide moderate-level insight, advice and expertise to other professionals, management, and external contacts in an assigned functional area.
• Ability to operate as a team player and communicate specialized knowledge to team members, managers, and external stakeholders.
• Knowledge of moderately complex principles and practices for a specialized area of focus.
• Strong verbal and written communication skills with the ability to document business and technical...