Privacy Analyst - Entry

MBL Technologies•Washington, DC

1d•Hybrid

About The Position

MBL Technologies, Inc. is seeking a Privacy Analyst - Entry to join their consulting team. This role will provide privacy consulting services to support a client’s security assessment and compliance processes. The client is located in the Washington, D.C. Metro area. This is a remote position with an occasional requirement to work onsite.

Requirements

Minimum three (3) years of experience advising on privacy compliance matters, including data privacy policies and procedures, data breach response, and vendor or third-party risk management.
In-depth knowledge of privacy laws, regulations, and frameworks, including hands-on experience implementing NIST SP 800-53 Rev. 5 privacy controls.
Demonstrated experience authoring Privacy Impact Assessments (PIAs) and Systems of Records Notices (SORNs).
Experience identifying, handling, and protecting sensitive data, including Personally Identifiable Information (PII).
Strong ability to communicate complex privacy and data protection concepts clearly and concisely to technical and non-technical audiences.
Excellent written and verbal communication skills.
Bachelor’s degree (BA or BS).
Must hold, or be eligible to obtain, a Public Trust clearance.

Nice To Haves

MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes): 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891

Responsibilities

Review and analyze privacy documentation, including Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and Systems of Records Notices (SORNs).
Develop, review, update, and maintain PTAs, PIAs, and SORNs in accordance with applicable regulations and standards.
Coordinate privacy-related activities with internal and external stakeholders, including Legal, Privacy, and Information Systems points of contact.
Create, update, and maintain privacy policies and procedures; communicate changes effectively to all relevant stakeholders.
Communicate privacy requirements to application developers and system owners to ensure appropriate privacy protections are embedded throughout the system development lifecycle.
Document system-specific privacy controls within System Security and Privacy Plans (SSPPs).
Analyze existing privacy program policies, procedures, practices, and artifacts to identify strengths, gaps, and opportunities for improvement.
Support privacy-related training initiatives, including tracking course completion and providing periodic status updates to privacy officials.
Assess user comprehension of privacy policies and best practices through quizzes and other evaluation methods.
Develop and deliver customized privacy training as needed.