Chief Privacy Officer - EHRA

State of North Carolina • 3700 Wake Forest Road Wake, NC

1d • $170,000 - $230,000 • Hybrid

About The Position

The position is designated Statutory Exempt (EHRA) and is exempt from the State Human Resources Act. This position may be eligible for hybrid remote work in accordance with state policy and the agency’s remote work program but does require weekly onsite work. Any telework will be under the conditions of the state Teleworking Program Policy and the employer may end any teleworking arrangement at any time in the employer's sole discretion. Are you ready to take the next step in your career? We currently have an opening for the Chief Privacy Officer for the State of North Carolina. Step into a role where your leadership will shape the statewide future of privacy, trust, and responsible innovation. As North Carolina’s Chief Privacy Officer, you will serve as the executive catalyst driving a mature, risk‑aware, and forward‑looking privacy program that underpins the integrity of statewide operations. This is a mission‑critical position for a visionary leader who can translate complex regulatory landscapes, emerging technologies, and enterprise risk into clear strategic direction. You will partner directly with senior executives to embed privacy into organizational culture, protect the State’s most sensitive data assets, and strengthen public trust through disciplined governance and proactive oversight.

Requirements

• Bachelor’s degree in computer science or a related IT field, business administration, project management, or closely related degree from an appropriately accredited institution and seven years of progressive information technology experience including three years managerial experience
• Associate degree in computer science or a related IT field, business administration, project management, or closely related degree from an appropriately accredited institution and eight years of progressive information technology experience with three years of managerial experience; or an equivalent combination of education and experience.
• This position requires a fingerprint-based background search. Hires must agree to a fingerprint-based background search prior to being hired.

Nice To Haves

• Deep understanding of state and federal privacy and data protection laws (e.g., HIPAA, FERPA) and evolving enforcement trends
• Strong knowledge of data risk management frameworks and required treatment of sensitive data types (ePHI, FTI, CJI, PII)
• Demonstrated experience in privacy, data protection, or compliance within complex organizations
• Professional certifications such as Certified Information Privacy Professional (CIPP) and/or Certified Information Privacy Manager (CIPM)
• Proven ability to design, lead, and mature enterprise privacy programs and frameworks
• Strong strategic insight and business judgment, with the capacity to balance risk management with organizational objectives
• Experience overseeing privacy governance related to artificial intelligence, machine learning, and advanced analytics
• Awareness of current and emerging privacy technologies that support compliance and organizational adaptation
• Practical experience implementing privacy controls, conducting assessments, and ensuring appropriate handling of sensitive data
• Demonstrated ability to integrate privacy-by-design principles into systems, processes, and enterprise initiatives.

Responsibilities

• Provide statewide executive leadership by setting the strategic vision for the privacy program, establishing policies and standards, and guiding long‑term program maturity.
• Modernize and enhance the enterprise privacy program, ensuring consistent, statewide alignment with federal and state regulatory requirements and emerging data governance expectations.
• Develop innovative privacy strategies for new and evolving technologies, including cloud environments, IoT, AI, and advanced analytics.
• Oversee all privacy operations, including privacy impact assessments, governance activities, incident management, and continuous monitoring of controls.
• Ensure strong alignment with the Enterprise Security and Risk Management Office (ESRMO) and the Chief Data Officer to maintain unified, enterprise‑wide privacy and security compliance across programs, investigations, and policy development.
• Implement and evaluate audit controls, ensuring appropriate oversight of systems containing restricted or highly restricted information and regular review of NIST‑aligned controls.
• Lead enterprise privacy training and workforce awareness, delivering executive‑level messaging and organization‑wide education that reinforces a culture of data responsibility.
• Conduct pre‑deployment reviews of systems and initiatives, ensuring compliance with privacy laws and alignment with BAAs, MOUs/MOAs, and interconnection agreements.
• Monitor, report, and remediate privacy risks, managing violations, preventing unauthorized data use, and coordinating breach determination and notification with ESRMO and regulatory authorities.
• Serve as the State’s senior privacy liaison, collaborating with internal stakeholders, regulators, legal authorities, and external partners to advance statewide privacy excellence.

Benefits

• The State of North Carolina is an Equal Employment Opportunity Employer and dedicated to providing employees with a work environment free from all forms of unlawful employment discrimination, harassment, or retaliation.
• The state provides reasonable accommodation to employees and applicants with disabilities; known limitations related to pregnancy, childbirth, or related medical conditions; and for religious beliefs, observances, and practices.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive