Acquisition Security & Privacy Analyst (Job 1456)

DLH•Bethesda, MD

2h•$115,000 - $125,000

About The Position

DLH is seeking an Acquisition Security & Privacy Analyst to join our team. The Acquisition Security & Privacy Analyst is responsible for privacy compliance, acquisition security reviews, governance and risk activities, and security authorization support across enterprise systems, cloud services, and emerging technologies. This resource works with system owners, privacy officials, contract teams, cybersecurity personnel, and federal leadership to ensure technology procurements and operational systems comply with federal security, privacy, and regulatory requirements.

Requirements

Minimum of three (3) years of experience reviewing and assessing IT acquisitions, cloud services, SaaS offerings, AI-enabled technologies, and software procurements for security, privacy, records management, and compliance requirements.
Experience supporting compliance with the Privacy Act, E-Government Act, HIPAA, and HHS privacy requirements
Prior experience developing and maintaining: Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), System of Record Notices (SORNs), Privacy Act Statements, and Privacy Notices and related documentation
Familiarity with NIST 800-53, FISMA, Privacy Act requirements, and federal compliance frameworks
Experience supporting privacy incident response and/or vendor risk assessments
Bachelor’s degree in information technology, Cybersecurity, or a related field.
Relevant certifications (e.g., CIPP/US, CIPM, CompTIA Security+, OneTrust Privacy Management Professional) required
Excellent problem-solving and analytical skills.
Strong cross-team collaboration and coordination across diverse audiences and stakeholders
Must be able to obtain a Public Trust clearance

Nice To Haves

Familiarity with FedRAMP and cloud security concepts
Experience with ServiceNow, Jira, Confluence, Microsoft 365, and compliance tracking tools

Responsibilities

Experience reviewing IT acquisitions, software purchases, cloud services, and third-party technology solutions for security and privacy considerations
Assist with tracking, documenting, and supporting remediation of privacy incidents involving PII and sensitive information
Assist in evaluating security and privacy requirements for procurement packages
Support identification of applicable security, privacy, and compliance clauses for acquisitions
Coordinate with acquisition teams, CORs, ISSOs, and system owners to gather required security and privacy information and resolve compliance issues
Support process improvement initiatives and maintenance of standard operating procedures