Privacy Analyst

$81,500 - $122,250/Yr

N.C Department Of Transportation

Full-time - Mid Level

Remote

Administration of Economic Programs

About the position

The Privacy Analyst position at the North Carolina Department of Information Technology (NCDIT) is responsible for conducting privacy risk assessments, monitoring privacy standards, and supporting the development of processes and controls to protect personal and sensitive data. The role involves collaborating with project teams to integrate privacy by design into IT systems, evaluating third-party vendors for compliance, and conducting audits to ensure adherence to privacy regulations.

Responsibilities

• Conduct Privacy Threshold Analyses (PTAs) and Privacy Impact Assessments (PIAs) for new projects, systems, and third-party services to identify potential privacy risks and develop mitigation strategies.
• Collaborate with project teams to incorporate privacy by design (PbD) into all enterprise IT systems and processes.
• Evaluate third-party vendors and contractors for privacy, data protection, and AI ethical and risk compliance as part of NCDIT's procurement and contracting processes.
• Identify potential privacy, data protection, and AI risks across state agencies' projects, programs, and services, providing written recommendations and appropriate mitigation strategies.
• Work with the enterprise security and IT security teams to ensure that enterprise systems are designed and maintained with appropriate privacy and data protection controls.
• Conduct regular audits and assessments to ensure compliance with privacy processes, documentation, policies and regulatory requirements.
• Collaborate with the cybersecurity team to investigate, document, and respond to potential data breaches involving PII or privacy incidents.
• Document privacy metrics.

Requirements

• Demonstrated knowledge of state and federal privacy and data protection laws and/or core concepts.
• Demonstrated knowledge of AI governance concepts and/or issues related to data privacy and protection.
• Demonstrated experience writing and reviewing privacy impact assessments and/or privacy threshold analyses.
• Demonstrated experience performing gap assessments and/or setting or implementing strategic initiatives.

Nice-to-haves

• IAPP Certifications (CIPM, AIGP, CIPT or CIPP/US preferred)

Benefits

• Health insurance options
• Standard and supplemental retirement plans
• Paid vacation
• Paid sick leave
• Paid community service leave
• Paid parental leave
• Longevity pay based on length of service
• 401K, 457, and 403(b) plans
• Twelve holidays per year
• Fourteen vacation days per year which increase with service
• Twelve sick days per year which are cumulative indefinitely