Policy Analyst Privacy Resource Center Support

Guidehouse•Bethesda, MD

6d•$65,000 - $108,000•Onsite

About The Position

The Policy Analyst will implement and sustain a comprehensive privacy compliance program within the National Institutes of Health (NIH). This is a full-time, on-site position in Bethesda, Maryland. The work includes integrating privacy into system lifecycles; reviewing and approving privacy documentation; supporting authorization activities; conducting privacy risk assessments; coordinating breach response; and developing and implementing privacy policies, training, and guidance. The analyst will research, analyze, and evaluate policy-related information and data; prepare status reports, management summaries, briefing papers, and other deliverables; assess findings and recommend efficient, effective, and economical approaches to policy objectives; and conduct fact-finding and research to support organizational policies and practices. The role also requires interpreting requirements, validating information from multiple sources, synthesizing complex material, preparing decision-support materials for senior management, coordinating reporting with staff and other offices, and summarizing relevant meetings and forums.

Requirements

Bachelor’s degree in government affairs, public policy, or a related field.
At least two years of privacy policy-related experience.
Proficiency in Microsoft Office Suite.
Demonstrated experience with policy analysis and evaluation.
Experience analyzing and/or writing policy briefs that adhere to compliance standards.
Ability to conduct research, collect data, and combine findings.
Knowledge of federal privacy laws and policies.
Ability to obtain and maintain a Federal or DoD public trust; approved adjudication is required before onboarding.

Nice To Haves

Active public trust or suitability.
Experience in public health and/or health-related policies.
Privacy program certification, such as certification from the International Association of Privacy Professionals (IAPP).
Experience with Privacy Impact Assessments and System of Records Notices.
Familiarity with the information technology procurement lifecycle.
Ability to apply analytical and critical thinking to analyze different types of information, solve problems, and support decisions.
Ability to work effectively in a team setting.
Strong interpersonal skills.
Strong written and verbal communication skills.
Attention to detail.

Responsibilities

Research, analyze, and evaluate data for policy information.
Prepare status reports, management summaries, and briefing papers that identify problems, assess work completed or in progress, and outline issues, solutions, and recommendations.
Analyze and evaluate findings and recommend efficient, effective, and economical ways to accomplish policy objectives.
Analyze data, policies, practices, and procedures to identify relevant issues, draw conclusions, and develop recommendations and alternative courses of action.
Conduct fact-finding and research to support the development, evaluation, and implementation of organizational policies and practices.
Interpret requirements; collect, analyze, and validate information from multiple sources; verify facts; draw conclusions; and develop accurate, well-supported work products.
Synthesize and condense complex material from a variety of sources for reports, briefings, presentations, and other organizational deliverables.
Develop background materials, analyses, options, and recommendations to support senior management briefings and decision-making.
Coordinate with staff and other offices to fulfill reporting requirements, including collecting and analyzing information and preparing written reports.
Compile and organize data and translate findings into graphs, presentation slides, briefing materials, and other visual or written products.
Attend relevant meetings, workshops, seminars, and forums; analyze information presented and prepare concise summaries of proceedings, findings, and issues.
Integrate privacy into system lifecycles, review and approve privacy documentation, support authorization activities, conduct privacy risk assessments, and coordinate breach response.
Develop and implement privacy policies, training, and guidance.

Benefits

Medical, prescription, dental, and vision insurance.
Personal and family sick time and company-paid holidays.
Parental leave.
401(k) retirement plan.
Group term life insurance and travel assistance.
Voluntary life and accidental death and dismemberment insurance.
Health Savings Account and health care and dependent care Flexible Spending Accounts.
Transit and parking commuter benefits.
Short-term and long-term disability.
Tuition reimbursement, personal development, certifications, and learning opportunities.
Employee referral program.
Corporate-sponsored events and community outreach.
Annual Care.com membership.
Employee Assistance Program.
Supplemental benefits through Corestream, including critical care, hospital indemnity, accident insurance, legal assistance, and identity theft protection.
Position may be eligible for a discretionary variable incentive bonus.