Cybersecurity Privacy Analyst

Booz Allen Hamilton•McLean, VA

19h•$62,000 - $141,000•Remote

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to the Federal Government. In all of this “cyber noise”, how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action. As an information security risk specialist on our team, you’ll work with Federal Civil Agencies to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You will apply advising skills with privacy knowledge to support clients in managing privacy risks while preparing for future needs. You will review and support the development of privacy compliance documentation, including Privacy Threshold Analysis (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs). You will use your expertise to develop and update plans and strategy in compliance with laws, regulations, policies, and standards in support of organizational privacy and cyber activities. You will work with a team to develop, update, and maintain standard operating procedures, work across departments and business units to implement organization’s privacy principles and programs, align privacy objectives with security objectives, and review and draft privacy disclosure statements based on current laws.

Requirements

2+ years of experience supporting federal privacy programs
Experience drafting PTAs, PIAs, and SORNs
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Bachelor’s degree

Responsibilities

Discover their cyber risks
Understand applicable policies
Develop a mitigation plan
Support clients in managing privacy risks while preparing for future needs
Review and support the development of privacy compliance documentation, including Privacy Threshold Analysis (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs)
Develop and update plans and strategy in compliance with laws, regulations, policies, and standards in support of organizational privacy and cyber activities
Develop, update, and maintain standard operating procedures
Work across departments and business units to implement organization’s privacy principles and programs
Align privacy objectives with security objectives
Review and draft privacy disclosure statements based on current laws