City Data and Privacy Officer

Salary: $150,550.40 - $218,296.00 Annually

Job Type: At Will

Job Number: 2026-00836

Location: Portland Building, 1120 SW 5th Ave, ORBureau: City Operations Service Area

Closing: 10/5/2026 11:59 PM Pacific

The Position: Job Appointment: Full-time. This position is exempt from Civil Service and is an "At Will" position.

Work Schedule: Monday-Friday, 8 am-5 pm. Work hours will vary to meet business needs.

Work Location: In person at the Portland Building, 1120 SW 5th Ave, Portland, OR 97204

Benefits: Please refer to our benefits tab for an overview of the benefits associated with this position. Application Material: Please click APPLY to submit your application via the City of Portland's online portal. You will need to attach a cover letter and resume. Why Work at the City of Portland? Portland is Oregon's largest city, home to more than 630,000 residents and serving a dynamic metro region of over 2 million people. As the City stands up a brand-new office at the center of how Portland governs data and protects resident privacy, this is a unique opportunity to build a program from the ground up and leave a lasting mark on the City's data governance and privacy practices. About the City Data and Privacy OfficeIn 2026, Portland City Council adopted a framework for a new City Data and Privacy Office (CDPO). The CDPO is a centralized office responsible for advancing citywide data governance, privacy protections, transparency, and stewardship of City data assets. This office will serve as the City's central point of accountability for data governance, developing policies and standards for the collection, use, retention, sharing, and management of City data, and coordinating consistent practices across bureaus.

About the Data & Privacy Officer Position: The City of Portland is seeking a strategic, collaborative, and transparent leader to serve as its inaugural City Data & Privacy Officer (CDPO). This is a rare opportunity to stand up a brand-new citywide office and shape how the City governs, protects, and uses data for years to come. Reporting to the City Operations Deputy City Administrator, the City Data & Privacy Officer leads the establishment, administration, and operations of the City Data and Privacy Office, with minimal direction. This is a single-incumbent, executive-level classification mandated by City Resolution, distinct from the City Administrator, Deputy City Administrators, and Bureau/Office Directors in that it holds citywide authority specifically over data governance, privacy oversight, and surveillance technology. The City Data & Privacy Officer will directly supervise a minimum of four (4) positions and build out a foundational team focused on privacy policy, data governance, and data analytics, with potential for the office to grow pending scope and need over time. As the City Data & Privacy Officer, you'll have the opportunity to:- Act as the City's lead for data governance, privacy oversight, and the surveillance technology inventory. Establish and chair the Data Governance Board and direct citywide data governance and privacy oversight. Develop and implement citywide data governance and privacy policies, including a citywide data minimization framework and a Privacy First Policy. Create an enterprise data inventory accounting for all City datasets and their publication/sharing status. Operationalize and lead mandatory Privacy Impact Assessments prior to deployment of pilots or programs involving data, automated decision-making systems, or large language models. Audit and evaluate high-risk technologies, including AI, LLMs, and automated decision-making systems, for bias, privacy risk, and policy compliance. Coordinate delivery of required reports to Council and City leadership on the sensitive data inventory and risk mapping. Facilitate statutory public engagement, at least once every three years, for Council to review the scope, priorities, and authorities of the Office. Partner with Communications and Engagement staff on outreach to underserved communities, multilingual data-rights materials, and ongoing community technology listening sessions. Manage and supervise the personnel, budget, and daily operations of the City Data and Privacy Office, including recruiting, training, evaluating, and mentoring staff. Represent the City in public forums, high-stakes environments, and intergovernmental conversations on data governance and privacy.

Ideal Candidate Profile: The ideal City Data & Privacy Officer pairs deep technical and policy fluency with the judgment and presence to stand up a brand-new citywide office from the ground up. We're looking for someone who can operate equally well in a City Council briefing, a technical audit of an AI system, and a community listening session. Core Expertise- Data Governance & Privacy Expertise: Deep knowledge of data governance, public policy, and the legal aspects of data and privacy, including local, state, and federal privacy law (e.g., the Oregon Consumer Privacy Act) and public records/open meetings law. Executive Leadership & Accountability: Track record of executive-level leadership in complex organizations, including budget, personnel, and vendor contract oversight. Emerging Technology Oversight: Skill in algorithmic auditing - evaluating AI, LLMs, and automated decision-making systems for bias, privacy risk, and compliance. Policy & Legislative Acumen: Ability to navigate complex regulatory environments, municipal finance, and enterprise-wide vendor negotiations. Collaborative, Cross-Bureau Leadership: Ability to build trust and consensus across decentralized municipal departments and overcome institutional resistance to change. Communication & Transparency: Ability to translate complex technical concepts clearly for executives, elected officials, staff, and the public.

Virtual Meet & Greet Opportunity: Meet the City Operations Deputy City Administrator and the senior recruiter to learn more about this position, how to apply, and what it's like to work with the City of Portland.

Date: Friday, October 2, 2026 Time: 11:00 am - 12:00 pmLink: To Qualify

Minimum Qualifications: Applicants should specifically address and demonstrate in their cover letter and résumé how their education, training, and/or experience meet each of the following minimum qualifications:- Bachelor's degree from an accredited college or university with major coursework in public administration, information technology, public policy, data science, or a related field. Ten (10) years of progressively responsible information management or public administration experience, including five (5) years of senior leadership/supervisory experience and five (5) years of experience developing and/or implementing governance, strategy, and oversight of data management and privacy practices. Any combination of education and experience that is equivalent to the above is acceptable.- Experience developing and implementing organization-wide data governance and privacy policies, with working knowledge of applicable data privacy practices and/or law, public records and open meetings law, and the legal aspects of data and privacy as they relate to vendor contracts. Experience in executive-level leadership of complex public sector operations, including budget development and oversight, personnel management, procurement, and contract management, informed by municipal finance and budgeting principles. Experience auditing or evaluating emerging technologies including artificial intelligence, large language models, or automated decision-making systems for bias, privacy risk, and regulatory compliance. Experience building trust and consensus across various organizational units, including the ability to influence and drive change without direct authority over those units. Experience translating complex technical or policy concepts for diverse audiences including strategic policy implementation and public transparency or engagement efforts. Experience applying process improvement methodologies and performance/accountability frameworks to drive continuous improvement in a complex organization, and/or experience negotiating enterprise-wide vendor or intergovernmental agreements.

Preferred Qualifications: Management experience working for a public agency. Certified Information Privacy Professional/USThe Recruitment Process

How to Apply: Submit your resume, cover letter, and responses to the supplemental questions. As with all City executive recruitments, the cover letter should specifically address each qualification listed above; "see resume" may result in disqualification.- (Optional) Submit, if applicable. If this is your first time applying with the City of Portland, or if you haven't requested veteran preference before (and would like to now), please attach your DD214-Member 4 and/or VA Benefit Letter to your application. Once we verify your eligibility, we'll record your veteran preference in our system, so it automatically applies to your future applications. What to Expect:- Application Review - (Week of October 5): We'll review your application materials to ensure you meet the qualifications listed above. You will receive an email when the application review is complete.

Selection Process: (Mid-October to Mid-November): We'll invite highly qualified applicants to interview. You can expect two rounds of virtual panel interviews, a City Council meet-and-greet, and an in-person final interview with City leadership. References will be checked for finalists. Conditional Job Offer (Early December): The final candidate may undergo a background or driving record check, depending on the position.