STATE CLASSIFICATION JOB DESCRIPTION


Salary Group B23

Class No. 1898

PRIVACY ANALYST II

GENERAL DESCRIPTION

Performs advanced (senior-level) privacy analysis work.  Work involves coordinating the review and monitoring of controls over confidential and sensitive data to prevent unauthorized disclosure.  May supervise the work of others.  Works under limited supervision, with considerable latitude for the use of initiative and independent judgment. 

EXAMPLES OF WORK PERFORMED

Coordinates and/or reviews and evaluates the life cycle of confidential and sensitive data, including the collection, storage, use, transfer, retention, and destruction of information.

Coordinates and/or conducts analysis for agencywide programs related to privacy, including facilitation and assessment activities.

Reviews privacy and security controls and makes compliance recommendations.

Researches and responds to privacy-related inquiries from internal and external customers.

Researches current privacy industry standards.

Responds to surveys and questionnaires required by other program areas and other risk identification initiatives.

Performs privacy awareness activities such as training, developing, and maintaining privacy-related communications; coordinating the marketing of privacy programs; and leading and/or participating on work groups and task forces.

Develops privacy controls, policies, standards, guidelines, and operating procedures.

Monitors and analyzes privacy-related legislation.

Evaluates third-party contracts, and makes recommendations regarding privacy practices and controls, as appropriate.

May supervise the work of others.

Performs related work as assigned.

GENERAL QUALIFICATION GUIDELINES

Experience and Education

Experience in privacy analysis, information security, or process management work.  Graduation from an accredited four-year college or university with major coursework in business administration, government, management information systems, public administration, or a related field is generally preferred.  Experience and education may be substituted for one another.

Knowledge, Skills, and Abilities

Knowledge of privacy and information security standards, of process development, and of project management theories and practices.

Skill in conducting research, in diagramming business process flows, and in the use of a computer and applicable software.

Ability to identify and resolve problems, to maintain confidentiality and protect privacy, to develop policies and procedures, to communicate effectively, and to supervise the work of others.


State Auditor’s Office

Added 9-1-15