Cybersecurity Privacy Analyst

Booz Allen Hamilton•McLean, VA

1d•$62,000 - $141,000•Hybrid

About The Position

As an information security risk specialist on the team, the Cybersecurity Privacy Analyst supports Federal Civil Agencies in identifying cyber risks, understanding applicable policies, and developing mitigation plans. The role applies advising skills and privacy knowledge to help clients manage privacy risks and prepare for future needs. The analyst reviews and supports the development of privacy compliance documentation, including Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs). The position develops and updates plans and strategies in compliance with laws, regulations, policies, and standards, supporting organizational privacy and cybersecurity activities. The analyst also helps maintain standard operating procedures, works across departments and business units to implement privacy principles and programs, aligns privacy objectives with security objectives, and reviews and drafts privacy disclosure statements based on current laws.

Requirements

2 or more years of experience supporting federal privacy programs.
Experience drafting privacy documentation and supporting compliance.
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
Bachelor’s degree.

Responsibilities

Support Federal Civil Agencies in identifying cyber risks, understanding applicable policies, and developing mitigation plans.
Advise clients on managing privacy risks and preparing for future needs.
Review and support the development of Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs).
Develop and update plans and strategies in compliance with laws, regulations, policies, and standards.
Develop, update, and maintain standard operating procedures.
Coordinate across departments and business units to implement privacy principles and programs.
Align privacy objectives with security objectives.
Review and draft privacy disclosure statements based on current laws.