Business Analyst - Information Governance

ASRC Federal•Washington, DC

1d•Hybrid

About The Position

Agile Decision Sciences LLC is looking for a Business Analyst - Information Governance to support a mature Federal Commission’s Controlled Unclassified Information (CUI) Management and Privacy Program. The Business Analyst will work as part of a team to support the overall CUI program and Privacy specific activities.

Requirements

3-year of related experience (compliance, information security, requirements analysis, business analysis)
Proficient in MS Office Suite
Experience in managing enterprise data, or sensitive data
Excellent capability in development of executive briefings, strategic recommendations, and roadmaps
Prior hands-on experience with data management, information governance, and policy development
Excellent verbal and written communication skills and attention to detail
Ability to develop effective and visually appealing executive briefings
Self-starter with ability to manage own schedule and work independently to meet deadlines
Experience working in teams on tasks to deliver a single work product together
Desire to work to grow skills and knowledge
Shows initiative and intellectual curiosity

Nice To Haves

Experience in the CUI and/or Privacy arena
Experience in Policy writing
Experience with Azure DevOps
Business process modeling
Scrum Master
Experience working with Microsoft Purview is highly preferred.
Experience with Zero Trust framework is highly preferred.

Responsibilities

Facilitate collaborative activities with organizational stakeholders across 12 program offices to increase compliance with policies and standards, understand challenges in compliance, and update and manage CUI training initiatives.
Support development and execution of a strategic roadmap for information governance within FERC
Develop and present executive level briefings to organizational leadership team
Provide technical advice, guidance, and recommendations to advance the program objectives
Develop and update mandatory training modules
Manage, track, and update catalog of document types
Develop, review, and maintain privacy policies and standard operating procedures to ensure it complies with federal mandates, NIST guidance, FISMA requirements, and Commission policies.
Review Privacy Threshold Assessments (PTAs) for all applicable Commission utilized systems.
Develop, review, and maintain Privacy Impact Assessments (PIAs) for all applicable Commission utilized systems.
Provide ad-hoc support such as preparing responses to OMB information requests, data calls, and requests from other entities as required.
Provide support in developing and reviewing System of Record Notices (SORN) for all applicable systems.
Support the annual FISMA audit by developing, reviewing, and preparing responses for the Senior Agency Official for Privacy section within the DHS CyberScope application.
Develop, maintain, and update privacy content on webpages and privacy training to ensure Commission employees understand their responsibilities required by federal mandates.
Provide Privacy Incident Response support for all identified incidents including but not limited to drafting communication emails, drafting responses to federal entities, and drafting notification letters to impacted staff.
Support the implementation of new privacy security tools as deemed appropriate.