Associate General Counsel & Privacy Officer (Vice President & General Counsel)

The Office of the General Counsel at Johns Hopkins University seeks applications to fill a position of Associate General Counsel & Privacy Officer (“Associate General Counsel”), to serve as a trusted advisor to the University, with a primary focus on privacy, information and cyber security, and data governance. The Associate General Counsel will also advise on digital accessibility, records management, and a wide range of data related issues. As such, the individual should have deep understanding of the laws, regulations, and industry best practices in these areas in order to interface effectively with institutional officials and other stakeholders. The Office of the General Counsel provides legal counsel and representation to Johns Hopkins University and all its schools, divisions, affiliates, and related entities. The office serves the legal needs of university trustees, officers, deans, directors, faculty, and staff in their official capacities. The office is also responsible for hiring and managing all outside counsel to represent the university and its units. The Associate General Counsel will report directly to the Senior Associate General Counsel and Chief Compliance Officer, who in turn reports to the Senior Vice President and General Counsel of the University. The Associate General Counsel will provide legal advice on a full range of applicable laws and regulations related to data and records management, privacy (including consumer and educational privacy laws and regulations), cybersecurity, and digital accessibility. The Associate General Counsel will also help operationalize the university’s non-clinical privacy compliance obligations, working closely with the Chief Information Officer, Chief Information Security Officer, Chief Risk Officer, and other officials to mitigate risk to the university through executing the daily operations of the privacy program, development, implementation and maintenance of policies and procedures, training and education, monitoring program compliance, and investigation and tracking of incidents. The Associate General Counsel will collaborate with Johns Hopkins Health System (JHHS) counsel and privacy officials on privacy, data security, cybersecurity, and data governance matters affecting both JHU and JHHS. Primary Duties and Responsibilities Privacy * Advise the university on legal issues related to applicable privacy obligations, including FERPA, HIPAA, GDPR, MODPA, CCPA, GLBA, consumer protection laws, and other applicable state, federal, and international privacy regulations. * Oversee the daily operations of the University’s privacy program. * Serve as the primary point of contact for non-clinical data privacy compliance for the university. * Assist in the development, implementation, and maintenance of privacy policies, procedures, and standards. * Serve as a resource for university departments on privacy compliance questions and program implementation. * Help ensure privacy requirements are embedded into university operations and decision-making. * Monitor and assess program compliance with applicable laws, regulations, and internal policies. * Coordinate with university IT, the University Registrar, and other offices, and serve as the point of contact for the supervisory authority, as needed. * Manage the data subject access request process. * Develop contractual addendums, terms and conditions, and standard clauses to support compliance with evolving domestic and global privacy regulations. Cybersecurity * Partner with the Chief Information Officer, Chief Information Security Officer, Chief Risk Officer, and other university officials to identify and mitigate legal and operational risk. * Interface with institutional officials and other stakeholders responsible for clinical records, human subject records, and related data to ensure compliant cybersecurity and data processing procedures and guidance. * Revise and/or develop...