Chief Privacy Officer

Commonwealth of Massachusetts • Boston, MA

2d • Hybrid

About The Position

The Department of Revenue's core mission is to collect the revenues required to support the business of the Commonwealth, to make a difference in the lives of children by enforcing the financial responsibilities of parenthood, and to assist Massachusetts cities and towns in sound and efficient fiscal management.
Our vision is to conduct our operation in a manner that inspires public confidence in government by administering and enforcing tax, child support and municipal finance laws in ways that are innovative, customer-focused, and transparent.
The Office of the General Counsel advises the Commissioner and others within the department on all aspects of tax, administrative and privacy laws. The Office seeks a Chief Privacy Officer to be responsible for the implementation of the agency’s Privacy Program Plan as well as active participation in DOR’s various internal policy groups, including Vendor Risk Management, Policy Workgroup, and the Governance Rick and Compliance Committee. The Chief Privacy Officer would also provide direct supervision of the Office of the General Counsel’s Administrative Law Unit. Among its responsibilities, the Administrative Law Unit conducts legal reviews of DOR’s procurement of services, goods and information technology systems and negotiates agreements with other agencies within the Commonwealth and vendors for the exchange of data.
The Chief Privacy Office will oversee these responsibilities and serve as a key legal advisor to A&F IT and DOR. As an executive legal manager, this position will also help develop legal strategy, policy and support the Deputy General Counsel to ensure quality legal services for DOR, A&F IT, and its partner agencies. Applicants must have a Juris Doctor (JD) degree, admission to the Massachusetts Bar.

Requirements

• Applicants must have a Juris Doctor (JD) degree, admission to the Massachusetts Bar.
• Applicants must have at least (A) six (6) years of full-time or, equivalent part-time, professional, administrative, supervisory, or managerial experience in a particular specialty (i.e. scientific, professional, or technical) and must possess current license and/or registration requirements established for the performance of the position, of which (B) at least two (2) years must have been in a supervisory or managerial capacity or (C) any equivalent combination of the required experience and substitutions below.

Nice To Haves

• Ability to set goals and strive for excellence or improvement.
• Ability to identify a problem or opportunity and take action to address current or future problems and opportunities.
• Strong legal knowledge, both in federal and state law governing privacy and legal processes.
• Ability to adjust to changing situations and be flexible to meet emergency or changing program or production requirements.
• Ability to organize work by establishing operating and/or reporting relations and by assigning the work accordingly.
• Ability to foster a culture of diversity, respect, and inclusion.
• Knowledge of the principles, practices, and techniques of legal management.
• Ability to provide career development by fostering the long-term learning or development of others.
• Ability to determine appropriate methods to communicate information based on the audience.
• Ability to understand and leverage authority and influence relationships within an organization.
• Ability to build and/or maintain friendly, reciprocal, professional relationships, and networks of contacts.
• Ability to identify and develop diverse talent.

Responsibilities

• Updates and implements the Agency’s Privacy Program Plan.
• Monitors and reports on changes in applicable federal and state laws, regulations, and frameworks and guidelines affecting privacy requirements.
• As a member of DOR’s Policy Workgroup, identifies and addresses policies and procedures related to privacy that require improvement; assists with implementation of new and updated policies and procedures.
• Advises on privacy risks and all aspects of administrative law and subsequent vendor requirements; serves on the Governance Risk and Compliance Committee (GRCC) and Vendor Risk Management (VRM) Workgroup and approves policy exception requests related to privacy.
• Manages privacy implications of security incidents with the Computer Security Incident Response Team (CSIRT).
• Represents DOR on the EOTSS Data Leadership Council.
• Manages the Administrative Law Unit, hiring employees and providing direct supervision for four employees and managing communications with Administrative Affairs, Procurement Financial Services Division, and Tax Administration.
• Manages Relationship with A&F IT Staff, including CIO, Deputy CIO and Project Leads.
• Ensures compliance with public records law.
• Acts as a liaison between DOR and the AG, IRS, and other federal state agencies to ensure compliance with federal and state disclosure procedures.
• Collaborates with HR, OEER, and Labor Relations to advise on procedures to address complaints of privacy violations and the appropriate disciplinary steps needed should an employee, contractor, or vendor fail to comply with privacy requirements.

Benefits

• When you embark on a career with the Commonwealth, you are offered an outstanding suite of employee benefits that add to the overall value of your compensation package. We take pride in providing a work experience that supports you, your loved ones, and your future.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Education Level: Ph.D. or professional degree