Privacy Analyst

$81,500 - $122,250/Yr

North Carolina Department Of Information Technology

Full-time - Mid Level

Remote

About the position

The Privacy Analyst will be responsible for conducting privacy risk assessments, monitoring and ensuring compliance with privacy standards, and supporting the maturation of privacy programs and controls to safeguard personal information and sensitive data. This role involves performing privacy and AI risk assessments, providing operational advice on privacy risks, and collaborating with various teams to ensure privacy by design in IT systems.

Responsibilities

• Conduct Privacy Threshold Analyses (PTAs) and Privacy Impact Assessments (PIAs) for new projects, systems, and third-party services to identify potential privacy risks and develop mitigation strategies.
• Collaborate with project teams to incorporate privacy by design (PbD) into all enterprise IT systems and processes.
• Evaluate third-party vendors and contractors for privacy, data protection, and AI ethical and risk compliance as part of procurement and contracting processes.
• Identify potential privacy, data protection, and AI risks across state agencies' projects, programs, and services, providing written recommendations and appropriate mitigation strategies.
• Work with enterprise security and IT security teams to ensure that systems are designed and maintained with appropriate privacy and data protection controls.
• Conduct regular audits and assessments to ensure compliance with privacy processes, documentation, policies, and regulatory requirements.
• Collaborate with the cybersecurity team to investigate, document, and respond to potential data breaches involving PII or privacy incidents.
• Document privacy metrics.

Requirements

• Bachelor's degree in computer science or a related IT field or related degree from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area; or Associate degree in computer science or a related IT field or related degree from an appropriately accredited institution and three years of progressive experience in IT Security or closely related area; or an equivalent combination of education and experience.
• Demonstrated knowledge of state and federal privacy and data protection laws and/or core concepts.
• Demonstrated knowledge of AI governance concepts and/or issues related to data privacy and protection.
• Demonstrated experience writing and reviewing privacy impact assessments and/or privacy threshold analyses.
• Demonstrated experience performing gap assessments and/or setting or implementing strategic initiatives.

Nice-to-haves

• IAPP Certifications (CIPM, AIGP, CIPT or CIPP/US preferred)

Benefits

• 401(k)
• 403(b)
• Health insurance
• Loan forgiveness
• Paid parental leave
• Parental leave
• Work from home