City Data and Privacy Officer

City of Portland•1120 SW 5th Ave, OR

11d•Onsite

About The Position

The City of Portland is establishing a new City Data and Privacy Office (CDPO) to advance citywide data governance, privacy protections, transparency, and stewardship of City data assets. This office will be the central point of accountability for data governance, developing policies and standards for data management, and coordinating practices across bureaus. This is a unique opportunity to build a program from the ground up and shape how the City governs, protects, and uses data. The City Data & Privacy Officer will lead the establishment, administration, and operations of this new office, reporting to the City Operations Deputy City Administrator. This executive-level role holds citywide authority over data governance, privacy oversight, and surveillance technology. The position will directly supervise a minimum of four staff and build out a foundational team, with potential for growth.

Requirements

Bachelor's degree from an accredited college or university with major coursework in public administration, information technology, public policy, data science, or a related field.
Ten (10) years of progressively responsible information management or public administration experience, including five (5) years of senior leadership/supervisory experience and five (5) years of experience developing and/or implementing governance, strategy, and oversight of data management and privacy practices.
Any combination of education and experience that is equivalent to the above is acceptable.
Experience developing and implementing organization-wide data governance and privacy policies, with working knowledge of applicable data privacy practices and/or law, public records and open meetings law, and the legal aspects of data and privacy as they relate to vendor contracts.
Experience in executive-level leadership of complex public sector operations, including budget development and oversight, personnel management, procurement, and contract management, informed by municipal finance and budgeting principles.
Experience auditing or evaluating emerging technologies including artificial intelligence, large language models, or automated decision-making systems for bias, privacy risk, and regulatory compliance.
Experience building trust and consensus across various organizational units, including the ability to influence and drive change without direct authority over those units.
Experience translating complex technical or policy concepts for diverse audiences including strategic policy implementation and public transparency or engagement efforts.
Experience applying process improvement methodologies and performance/accountability frameworks to drive continuous improvement in a complex organization, and/or experience negotiating enterprise-wide vendor or intergovernmental agreements.

Nice To Haves

Management experience working for a public agency.
Certified Information Privacy Professional/US

Responsibilities

Act as the City's lead for data governance, privacy oversight, and the surveillance technology inventory.
Establish and chair the Data Governance Board and direct citywide data governance and privacy oversight.
Develop and implement citywide data governance and privacy policies, including a citywide data minimization framework and a Privacy First Policy.
Create an enterprise data inventory accounting for all City datasets and their publication/sharing status.
Operationalize and lead mandatory Privacy Impact Assessments prior to deployment of pilots or programs involving data, automated decision-making systems, or large language models.
Audit and evaluate high-risk technologies, including AI, LLMs, and automated decision-making systems, for bias, privacy risk, and policy compliance.
Coordinate delivery of required reports to Council and City leadership on the sensitive data inventory and risk mapping.
Facilitate statutory public engagement, at least once every three years, for Council to review the scope, priorities, and authorities of the Office.
Partner with Communications and Engagement staff on outreach to underserved communities, multilingual data-rights materials, and ongoing community technology listening sessions.
Manage and supervise the personnel, budget, and daily operations of the City Data and Privacy Office, including recruiting, training, evaluating, and mentoring staff.
Represent the City in public forums, high-stakes environments, and intergovernmental conversations on data governance and privacy.