Senior Data & AI Compliance Specialist
Job Summary
The Senior Data & AI Compliance Specialist will be responsible for supporting the operations of the data & AI compliance functions for teams within the Information Technology (IT) department to ensure that data & AI solutions are managed, administered, released, and shared in accordance with UCSF and UCOP security, privacy, and compliance policies and state and federal laws.
Key functions that this role will support include:
- Enterprise Data Request Process (EDRP) Operational Support. The EDRP is a core process for the intake of requests for sensitive and restricted data sets from UCSF Enterprise data sources by Enterprise reporting teams. A ServiceNow solution serves as the intake form and workflow engine for an automated solution that has been implemented to ensure that each data request progresses through all required compliance checks in accordance with UCSF and UCOP policies in a consistent and standard manner. The Senior Data & AI Compliance Specialist will be responsible for providing level 2 support to the Enterprise reporting teams to facilitate the resolution of any issues or questions that may arise about the progression of data requests through the EDRP and will collaborate with the UCSF IT Service Management team to troubleshoot any issues that require level 3 technical support. In addition, this role will be responsible for user acceptance testing of all enhancements made to the Enterprise Data Request Form and the associated workflow prior to rollout. This role will generate user documentation on the Enterprise Data Request Process and Enterprise Data Request Form for the Enterprise reporting teams and their end users. This role will also be responsible for the configuration of the metadata in the ServiceNow EDRP tables that drives the automated execution of the workflow. This function requires an in-depth knowledge of clinical and informatics workflows to support data services teams in the definition of data access processes that support the fulfillment of data needs.
- Data Sharing Review Concierge Services. The Senior Data & AI Compliance Specialist will be responsible for facilitating the intake of data sharing review requests through a concierge model. Through this concierge service, this role will meet with the UCSF constituents who are seeking to share data and their Contracting Officers to gather complete information and supporting documentation about their data sharing engagements for the submission of data sharing review requests and will complete the Safety Net Submission Form for the engagements. Once the Data Sharing Oversight Committee has completed their review of each engagement, the Senior Data & AI Compliance Specialist will provide project management support to track the completion of each follow-up action item that results from the reviews and will provide any support needed by the UCSF constituent or Contracting Officer for the successful completion of the follow-up action items. This function requires expertise in the definitions of Protected Health Information, Research Health Information, and de-identified clinical data for the analysis and classification of data sets that will be shared externally. This work necessitates a strong working knowledge of the HIPAA data de-identification standards to enable this role to quickly determine whether data sets have been correctly de-identified. The Senior Data & AI Compliance Specialist will be responsible for ensuring that the appropriate UCSF SMEs are looped into the data sharing reviews, including Export Control, AI Governance, Risk, Faculty, and other subject area experts as required.
- Data Sharing Review Technical Support. The Senior Data & AI Compliance Specialist will be responsible for the maintenance and administration of the Safety Net Submission Form and the data sharing review records in SharePoint. This work will include maintenance of the data sharing review request artifacts in Box. This role will also be responsible for enhancing the Safety Net Submission Form as needed to reflect current institutional requirements for the sharing of UCSF data sets externally. This role will partner with the UCSF SharePoint team to troubleshoot and resolve level 3 technical issues that may arise with the SharePoint form or database. This role will also be responsible for maintaining and enhancing AI solutions to make compliance documentation and guidance readily available to the UCSF Community through UCSF AI tools, such as Versa.
- Data Analysis of Operational Metrics. This role will be responsible for extracting and analyzing the data associated with the operational activities of data & AI compliance functions, such as the data sharing review function, to generate metrics about the activities for Management on an as needed basis.
- Maintenance of Data & AI Compliance Web Content. This role will be responsible for implementing new web content and updating existing web content about data & AI compliance areas to ensure that the UCSF Community has the most up-to-date information about current data & AI compliance requirements and the processes and procedures that enforce the requirements. This work requires in-depth knowledge of the Drupal platform.
- Level 2 Data Compliance, Intake, & AI Support. The Senior Data & AI Compliance Specialist will support the UCSF Community to address level 2 support needs for data compliance, intake, and AI matters. This work will include providing advising and consulting services about data compliance, data sharing, AI, and service request intake subjects to the UCSF Community across the Health, Research, FAS, and Education domains. The Senior Data & AI Compliance Specialist will leverage their collaborative and clear communication skills to facilitate the resolution of data compliance & AI inquiries that require input from UCSF governance groups, such as the UCSF Privacy Office, IT Security & Policy, and Institutional Review Board teams. Level 2 support requests will be escalated to the Associate Director of Data Compliance on an as needed basis. This work necessitates expertise in complex informatics and AI concepts, such as data de-identification, to enable the Senior Data & AI Compliance Specialist to partner with informatics and data services teams on the definition of informatics and AI solutions, the design of informatics, intake, and AI workflows, and the transformation of data that fulfill the requirements of UCSF for the security and privacy of sensitive and restricted data. This role will be responsible for analyzing the Protected Health Information, Research Health Information, and de-identified clinical data that is exposed through dashboards to classify the dashboards prior to publication to ensure that sufficient privacy and security controls are implemented.
- Lead working groups for data compliance initiatives on an as needed basis.
- Write user and operational documentation, process diagrams, and web content about data compliance, AI, data sharing, and intake process subject areas. Customize the generated documentation to most effectively communicate the complex information to the target audience and forum.
The Senior Data & AI Compliance Specialist is responsible for facilitating the sharing, use, release, and granting of access to UCSF data and AI solutions in accordance with UCSF and UC policies and state and federal laws that govern the use, release, and management of sensitive and restricted data sets across the Health, Finance and Administration Services, Education, and Research domains. This role will support and maintain central Enterprise data access, compliance, intake, AI, and data sharing processes and will facilitate the definition of new processes and procedures to support evolving institutional and legal requirements. Candidate will apply expert-level knowledge in regulatory guidelines and security policies and advanced technical project management frameworks and methods to develop new technical solutions to meet compliance requirements and define new processes and standard operating procedures to enable teams across the enterprise to adhere to policy and legal guidelines and regulations. The candidate will possess the ability to identify opportunities for automation of existing compliance processes and procedures to introduce operational efficiencies for governance, contracting, and customer teams and increase the rate of adherence to guidelines and regulations. Experienced professional who knows how to apply theory and put it into practice with in-depth understanding of the professional field and the health care system and research environments. Coordination at the Enterprise level of strategic partnerships and collaborations of governance groups, contracting departments, data service providers, and end users to define solutions, processes, and procedures for securely and compliantly managing, using, releasing, and sharing UCSF data in accordance with UCSF and UC policies and state and federal laws. Candidate will have the ability to influence people that do not directly report to them and hence must possess strong inter-personal skills such as team building, consensus building, diplomacy, persuasiveness and the ability to create a positive work environment. As a member of the cross-functional Data Compliance team, the Senior Data & AI Compliance Specialist will join professionals with a broad knowledge of the healthcare industry including contracting, legal affairs, research, privacy, security, research informatics, regulatory reporting, compliance, and healthcare IT. The Senior Data & AI Compliance Specialist will be an integral part of a collaborative cross-functional team to deliver exceptional client service to meet UCSF compliance, innovation, and security objectives.
Under direction of the UCSF Associate Director of Data Compliance, the Senior Data & AI Compliance Specialist will be the key individual responsible for coordination of the intake, review, and project management of requests to share sensitive and restricted UCSF data sets with third parties that require review by the Data Sharing Oversight Committee. This function requires an in-depth knowledge of the research lifecycle, AI concepts, HIPAA regulations, data de-identification methodologies, and UCSF and UC policies governing the external sharing of data to ensure that the specifications of the planned data sharing engagement and the characteristics of the involved data set are accurately communicated during the review of the data sharing engagement. This individual will work closely with all members of the organization, including campus and health system areas at UCSF. The Senior Data & AI Compliance Specialist will provide support where needed to the Associate Director of Data Compliance and stand in as department Associate Director when requested. The right candidate will understand well, the partnership, collaboration and teamwork needed with key business, governance, and technology leaders to achieve success in this endeavor.
The Senior Data & AI Compliance Specialist will partner with data services and informatics teams across the UCSF Enterprise on complex, cutting-edge informatics and AI initiatives and will apply their expertise in complex informatics, AI, and research areas to facilitate the definition and deployment of informatics, analytics, and AI solutions, informatics processes, and data transformation approaches that achieve meeting data compliance, privacy, and security objectives of UCSF and UC policies and state and federal laws governing restricted and sensitive data. This role will apply their expertise in HIPAA regulations, data de-identification, and the definitions of Protected Health Information, Research Health Information, and de-identified clinical data to facilitate the intake of data sharing review requests and the analysis and classification of dashboards prior to publication. The Senior Data & AI Compliance Specialist will serve as a subject matter expert in the de-identification of clinical data sets derived from the APeX EHR clinical system and will apply this knowledge to quickly determine whether data sets have been sufficiently de-identified for the planned release, use, or sharing of the data.
The final salary and offer components are subject to additional approvals based on UC policy. Your placement within the salary range is dependent on a number of factors including your work experience and internal equity within this position classification at UCSF. For positions that are represented by a labor union, placement within the salary range will be guided by the rules in the collective bargaining agreement. The salary range for this position is $113,800 - $178,300 (Annual Rate). To learn more about the benefits of working at UCSF, including total compensation, please visit: https://ucnet.universityofcalifornia.edu/compensation-and-benefits/index.html Department Description The Data Compliance department functions as the liaison between the customer or technical teams in the organization and governance resources to provide data compliance guidance and solutions to solve problems, answer questions and meet the needs of our customers and technical teams. Key partners include the UCSF Health, Finance and Administration Services, and Campus Communities, contracting departments, and governance groups. The team is involved in strategic and operational activities to facilitate the use, release, sharing, and granting of access to UCSF data and AI solutions in a secure and compliant manner that fulfills the requirements of UCSF and UC policies and state and federal laws.
The University of California San Francisco (UCSF) Department of Information Technology is seeking a qualified individual to facilitate and support complex solutions, processes, and policies to ensure that UCSF data and AI solutions are released, shared, and managed securely and compliantly by data service providers, informatics teams, and end users enterprise wide. Required Qualifications
- Bachelor's degree required in Health Care Administration, Business Administration, Information Systems, or related field and minimum 5 years work experience in health care
- 3-5 years' experience in informatics, research data analysis or reporting, research data management consulting, or health care reporting
- Minimum three (3) years of experience in information systems application support through ITIL service management processes or application development through the Software/Systems Development Life Cycle.
- 2-4 years of experience managing complex technical or compliance projects
- 1-3 years of experience in process modelling and the documentation of processes through workflow diagrams and user documentation
- 1-3 years of experience analyzing the requirements of policies and state and federal laws and applying them to operational practices and solutions development
- 1-3 years managing web-based content through a web publishing or content management system framework, such as Drupal
- Expert-level knowledge of Health Insurance Portability and Accountability Act regulations, including both the HIPAA Privacy and Security rules
- Strong critical thinking and problem-solving skills to lead teams, manage complex information, assess problems, and develop effective solutions. Ability to demonstrate excellent judgment, attention to process, and detail.
- Strong working knowledge of the Family Educational Rights & Privacy Act and how to manage student information in accordance with the regulations
- Demonstrated ability to integrate critical information across disciplines. In-depth knowledge of clinical patient care, informatics, and/or clinical research workflows and concepts
- Demonstrated ability to clearly articulate complex compliance information to technical teams, Leadership, and customers across disciplines. Strong written and verbal communication skills.
- Discretion, confidentiality, tact, and ability to deal with sensitive data involving Protected Health Information (PHI), Research Health Information (RHI), and Personally Identifiable Information (PII).
- Strong track record of providing excellent customer service to support technical solutions, institutional policies, or service processes
- Proven ability to prioritize work across diverse focus areas to ensure that customer and institutional deadlines are met
- Prior experience drafting PowerPoint presentations for Management and Senior Leadership that communicate complex IT or compliance information
- Familiarity with health care and/or Research workflows and environments
- Knowledge of the HIPAA Safe Harbor and Expert Determination data de-identification standards and experience analyzing whether row-level clinical data has been de-identified in accordance with these standards
Preferred Qualifications
- Registered Nurse or other currently licensed healthcare professional
- Six Sigma Black Belt certification
- Project Management certification
- Master's Degree in Health Sciences or Business-related field, statistics, epidemiology, public health, operations research, computers / systems engineering or other relevant field or equivalent work experience
- Experience working with IT service management platforms, such as ServiceNow
- Prior experience defining and drafting healthcare or research data management, use, release, or access policies or plans
- 1-3 years experience in SharePoint administration
- 1-3 years experience generating operational metrics through the analysis of operational data and generating analytical visualizations of the metrics for increased understanding
- 1-2 years experience in information systems quality assurance testing, including hands-on experience defining test plans for and performing unit, integration, regression, and user acceptance testing of information systems web-based and database solutions.
- 1-3 years experience in SharePoint administration
About UCSF The University of California, San Francisco (UCSF) is a leading university dedicated to promoting health worldwide through advanced biomedical research, graduate-level education in the life sciences and health professions, and excellence in patient care. It is the only campus in the 10-campus UC system dedicated exclusively to the health sciences. We bring together the world's leading experts in nearly every area of health. We are home to five Nobel laureates who have advanced the understanding of cancer, neurodegenerative diseases, aging and stem cells. Pride Values UCSF is a diverse community made of people with many skills and talents. We seek candidates whose work experience or community service has prepared them to contribute to our commitment to professionalism, respect, integrity, diversity and excellence - also known as our PRIDE values.
In addition to our PRIDE values, UCSF is committed to equity - both in how we deliver care as well as our workforce. We are committed to building a broadly diverse community, nurturing a culture that is welcoming and supportive, and engaging diverse ideas for the provision of culturally competent education, discovery, and patient care. Additional information about UCSF is available at diversity.ucsf.edu
Join us to find a rewarding career contributing to improving healthcare worldwide. Equal Employment Opportunity The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected status under state or federal law. Job Code and Payroll Title 006361 CLIN INFORMATICS SPEC 4 HX Job Category Clinical Systems / IT Professionals Bargaining Unit University Professional and Technical Employees - Health Care Professionals Unit (UPTE-HX) Location San Francisco, CA Campus Mission Center Building (SF) |
University of California - San Francisco Campus and Health
Feb 12, 2026