The Privacy Analyst will work with privacy officials, system owners, cybersecurity personnel, program offices, and other stakeholders to assess systems and data practices, document privacy requirements, and support the development and maintenance of federal privacy compliance artifacts.
Key Responsibilities- Support the preparation, review, and maintenance of Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), System of Records Notices (SORNs), and related privacy documentation.
- Identify and document the collection, use, maintenance, sharing, retention, and disposal of personally identifiable information.
- Translate technical and operational information into clear, accurate privacy compliance documentation.
- Review privacy documentation for completeness, consistency, accuracy, and compliance with applicable federal and departmental requirements.
- Identify potential privacy risks and assist stakeholders in documenting appropriate mitigation measures.
- Maintain accurate assessment records, status reports, trackers, and supporting documentation.
- Handle sensitive information with accuracy, discretion, and confidentiality.
Requirements- Bachelor's degree in cybersecurity, information systems, information technology, public policy, legal studies, business, or a related field. Relevant experience may be considered in place of a degree.
- At least two years of experience supporting one or more of the following areas:
- Privacy compliance
- Information governance
- Cybersecurity governance, risk, and compliance
- Risk Management Framework or authorization activities
- Information-system security
- Experience gathering, analyzing, and documenting technical or operational requirements.
- Understanding of personally identifiable information(PII), data flows, access controls, information sharing, retention, and privacy risk.
- Strong analytical, research, writing, editing, and organizational skills.
- Ability to manage multiple assessments and documentation requirements simultaneously.
- U.S. citizenship and ability to satisfy applicable federal background investigation, suitability, or security requirements.
Preferred Qualifications- Direct experience preparing or reviewing PTAs, PIAs, SORNs, or similar federal privacy compliance artifacts.
- Experience supporting the Department of Homeland Security.
- Experience with the NIST Risk Management Framework and NIST SP 800-53 security and privacy controls.
- Previous experience as a privacy analyst, system analyst, ISSO, security control assessor, RMF analyst, or federal GRC analyst.
- Knowledge of the Privacy Act of 1974, E-Government Act privacy requirements, Fair Information Practice Principles, and federal privacy policy.
