Job Description

Join the Cleveland Clinic team where you will work alongside passionate caregivers and make a lasting, meaningful impact on patient care. Here, you will receive endless support and appreciation while building a rewarding career with one of the most respected healthcare organizations in the world.


Performs all necessary duties to ensure the organization's adherence to data protection and privacy regulations, with a primary focus on the General Data Protection Regulation (GDPR). This position is responsible for identifying and addressing compliance gaps, supporting the completion of Data Protection Impact Assessments (DPIAs), managing Data Subject Access Requests (DSARs), and driving continuous improvement of the cybersecurity and privacy compliance program. The analyst will collaborate across departments to promote a culture of compliance and safeguard the integrity of the organization's data assets.

A caregiver in this position works remotely Monday - Friday 8:00am--5:00pm

EST.

A caregiver who excels in this role will:


Ensure organizational compliance with GDPR and other applicable data protection regulations by assessing controls, identifying deficiencies, and coordinating remediation efforts. Lead or support the completion of Data Protection Impact Assessments (DPIAs) and similar evaluations to identify, document, and mitigate data privacy risks across business processes and systems. Oversee the intake, coordination, and fulfillment of Data Subject Access Requests (DSARs), ensuring timely and compliant responses in accordance with regulatory standards. Contribute to the development, implementation, and maintenance of data protection policies, standards, and procedures. Recommend and implement program enhancements to strengthen privacy governance and cybersecurity maturity. Partner with Information Security, Legal, Compliance, and IT teams to align operational practices with regulatory obligations and data protection best practices. Support the design and delivery of privacy and cybersecurity awareness initiatives to promote understanding of GDPR requirements and secure data handling practices across the organization. Maintain documentation and reporting on compliance activities, risk findings, and mitigation progress. Support internal and external audits or regulatory inquiries as required. Monitor evolving data protection regulations, industry trends, and best practices to proactively identify opportunities to improve the organization's compliance posture and maturity. Provide support for broader cybersecurity and compliance initiatives to advance the organization's overall security objectives. Other duties as assigned

Minimum qualifications for the ideal future caregiver include:


High School Diploma/GED: A minimum of 3 years of Information, Cyber Security, Clinical, or Financial Systems experience, including directing, planning and scheduling a major information system project. Bachelor's Degree: A minimum of 1 year Information, Cyber Security, Clinical, or Financial Systems experience, including directing, planning and scheduling a major information system project. Certified Information Privacy Professional/Europe (CIPP/E) certification is required within 12 months of the position's start date. For Information Technology Division caregivers, ITIL Foundations certification is required within 6 months of the position start date.
Complexity of Work:

Strong analytical, administrative, presentation, and project management skills are required. Must have strong communication skills (both written and verbal) and the ability to work with minimal supervision. Understanding networking/distributed computing environment concepts. Excellent knowledge of security technology and strong analytical skills.

Preferred qualifications for the ideal future caregiver include:


Bachelor's degree in Information Technology/Computer Science or related field preferred. Certifications from SysAdmin, Audit, Network and Security Institute (SANS), International Information Systems Security Certification Consortium (ISC2) or Computing Technology Industry Association (CompTIA) or other position related certifications preferred. Background in privacy with experience in GDPR

Physical Requirements:

Ability to perform work in a stationary position for extended periods. Ability to travel throughout the hospital system. Ability to operate a computer and other office equipment. Ability to communicate and exchange accurate information.

Personal Protective Equipment:

Follows standard precautions using personal protective equipment as required.

Pay Range

Minimum Annual Salary: $63,250.00


Maximum Annual Salary: $96,467.50


The pay range displayed on this job posting reflects the anticipated range for new hires. A successful candidate's actual compensation will be determined after taking factors into consideration such as the candidate's work history, experience, skill set and education. The pay range displayed does not include any applicable pay practices (e.g., shift differentials, overtime, etc.). The pay range does not include the value of Cleveland Clinic's benefits package (e.g., healthcare, dental and vision benefits, retirement savings account contributions, etc.).