Senior Privacy Analyst NEW

Data Systems Analysts - Fairfax, VA

Full-time - Senior

Hybrid - Fairfax, VA

Professional, Scientific, and Technical Services

About the position

The Senior Privacy Analyst at Data Systems Analysts, Inc. (DSA) is a leadership role responsible for overseeing the National Privacy Program for a government agency. The position requires strong leadership skills to manage teams and projects while ensuring compliance with federal privacy laws and regulations. The analyst will serve as a subject matter expert, advising senior management on privacy-related risks and developing strategic plans to protect Personally Identifiable Information (PII).

Responsibilities

• Ensure the Agency complies with Privacy laws, statutes, policies, and regulatory documents to safeguard Personally Identifiable Information (PII).
• Ensure Agency Stakeholders address Privacy requirements, as outlined in published directives and are implemented with accurate information.
• Assure that the use of technologies sustains and does not erode privacy protections relating to the use, collection, and disclosure of personal information.
• Assure that personal information contained in Privacy Act systems of records is handled in full compliance with fair information practices as set out in the Privacy Act of 1974.
• Evaluate legislative and regulatory proposals involving collection, use, and disclosure of personal information by the Federal Government.
• Conduct a privacy impact assessment of proposed rules of the Department or that of the Department on the privacy of personal information.
• Prepare a report to OMB and Congress on an annual basis on activities of the Agency that affect privacy.
• Manage ongoing privacy compliance activities with an eye towards creating process efficiencies wherever possible.
• Help define, update, maintain, and enhance privacy compliance program requirements.
• Support privacy compliance reviews and oversee remediation activities across the Agency.
• Support the monitoring of system/process development for privacy compliance.
• Provide subject matter expertise insight on a variety of privacy-related programs, initiatives, and workflows.
• Understand how privacy technologies can serve as an enabler for privacy program operations and assist with deployment of privacy-enhancing technologies.
• Enhance the National Privacy Program to improve governance and readiness for product, operations, and data-driven business models through policy, standard, and guidance creation and revision.
• Support periodic review of applicable privacy policies in light of changes to laws, rules, regulations, and organizational policies.
• Monitor and evaluate evolving laws, rules, regulations, and guidance to help maintain compliance and strategic alignment.
• Collect customer satisfaction and internal service performance feedback to foster continual improvement.

Requirements

• US Citizenship.
• Bachelor's Degree and minimum eight (8) years of experience developing and implementing Privacy policy for a federal organization.
• Advanced Privacy certifications e.g., Certified Information Privacy Professional (CIPP), Certified Information Privacy Technologist (CIPT), Certified Information Privacy Manager (CIPM) or equivalent.
• Experience working for a U.S. federal government Agency or contractor.
• Demonstrated experience assessing risk and advising on organizational controls.
• Skill in applying government privacy laws, regulations, principles and policies to assignments involving the release of information to the public.
• Skill in conducting analyses of legislation and regulations to determine impact on program operations.
• Knowledge of the Freedom of Information Act and the Privacy Act.
• Knowledge of Federal and Agency records management systems, regulations, principles and policies.
• Ability to work with limited supervision and meet multiple project milestones and deadlines as required by the client.
• Excellent written and oral communication skills including delivery of client-ready work products and the ability to communicate complex technical issues to senior stakeholders and non-technical staff.
• Experience working with Federal Information Security Modernization Act (FISMA) requirements and NIST guidelines, including NIST SP 800-53.
• Demonstrated ability to prioritize and manage competing work assignments in a time sensitive environment.
• Keen attention to detail and the ability to solve problems using best practices and systematic approach.

Nice-to-haves

• CDM Dashboard
• SharePoint
• Qlik Sense
• Governance, Risk and Compliance (GRC) Tools e.g. Telos Xacta IA Manager or similar like CSAM, RSA Archer, etc.

Benefits

• Flexible work location with telework options as approved.