Principal US Privacy Analyst

Northrop Grumman•Fore Store, VA

13d•Remote

About The Position

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Northrop Grumman is seeking an experienced Principal US Privacy Analyst to join our Insights & Intelligence team within the Chief Information and Digital Office. Insights and Intelligence leads the integrated analytics, AI, data and intelligence strategy for the company and our mission is to reimagine decision making by bridging the gaps between organizations and connecting our business strategy to the right insights, analytics, and data. As a US privacy analyst, you will report to the US Privacy Manager and will play a critical role in ensuring policy and regulatory compliance, mitigation of business risk, and responsible handling of personal data. You will champion privacy principles and collaborate seamlessly with stakeholders by decomposing complex privacy concepts for translation and understanding across teams. You will leverage your knowledge of the regulatory environment and critical thinking skills to identify creative and effective solutions. The primary location for this position is in Falls Church, VA; alternative work locations/arrangements will be considered as well, including working 100% virtual/remote.

Requirements

Must have at least 5 years of experience in any of the following disciplines: Privacy, Data Governance, and/ or Legal with a Bachelor's degree, or at least 3 years of this type of relevant experience with Master's degree
Demonstrated experience negotiating data protection agreements with external vendors to ensure all applicable data privacy law requirements are met.
Demonstrated experience in operationalizing privacy-by-design principles in product development cycles by conducting data protection impact assessments and implementing risk mitigation strategies tailored to business needs.
Excellent verbal and written communication skills and proven ability to build relationships and positively influence business decisions related to privacy.
Strong technical, analytical, troubleshooting, interpersonal, and problem-solving skills.
Proven ability to work independently and within a global virtual team environment, stay organized, and execute work in accordance to tight deadlines.

Nice To Haves

Demonstrated understanding of global privacy the GDPR, EU AI Act, CCPA, CPRA, PIPL, NIST 800-171 and other applicable regulations and standards.
Juris Doctor and/ or advanced education or experience in privacy, data governance, or information technology.
Top Secret Security Clearance is preferred.
Experience handling data subject rights request and/or regulatory inquiries
Familiarity with user tracking technologies, e.g., cookies, pixels, web beacons, and implementation tools, e.g., Google Tag Manager, GA4, etc.
Experience working with ServiceNow, OneTrust, Credo AI, and/or similar software platforms to execute data privacy and AI privacy compliance processes.
Experience as a privacy subject matter expert for identifying risks and mitigation strategies for AI use cases and implementing AI Governance policies and procedures.
Familiarity with DFARS, NIST SP 800-171, and CMMC 2.0.

Responsibilities

Support privacy and data governance controls by maintaining data inventories, conducting data mapping, implementing privacy by design, ensuring data minimization, and ensuring data retention requirements.
Collaborate with business stakeholders across disciplines (e.g., law, IT, AI and data governance, communications, global supply chain, cybersecurity, etc.) on privacy assessments of products, technologies, and vendors and proactively identify and address potential privacy concerns.
Investigate and resolve privacy-related inquiries, questions, and/or complaints.
Support the development, evaluation, and refinement of privacy policies, procedures, documentation, company guidance, and processes in alignment to the evolving regulatory environment and in pursuit of continuous improvement.
Develop and implement initiatives to increase employee awareness and knowledge of key privacy topics including company policies
Establish and apply privacy best practices and mentor and train early career privacy professionals.
Understand technical terminology to translate between technical and privacy teams on regulatory requirements.
Manage team mailboxes to respond to privacy queries.
Exhibit personal ownership and accountability for continuous improvement.
Identify critical issues with ease.
Exhibit confidence and knowledge of privacy best practices with minimal oversight.