Privacy Analyst - Mid

Koniag Government Services•Washington, DC

1d•Hybrid

About The Position

Koniag Operations Services, a Koniag Government Services company, is seeking a motivated and detail-oriented Mid-Level Privacy Analyst to support privacy compliance initiatives for KOS and its government customer in Washington, DC. The position is hybrid and requires the ability to obtain a Public Trust Clearance. The Privacy Analyst will support the organization's privacy compliance program by conducting assessments, analyzing data-handling practices, and assisting with the development of privacy policies and procedures. The role calls for a proactive professional with a foundation in privacy regulations and data protection practices who can apply analytical skills and privacy knowledge to assess risks, support compliance programs, and safeguard sensitive information.

Requirements

Bachelor’s degree in Information Technology, Legal Studies, Public Policy, or a related field from an accredited college or university.
5–7 years of experience in privacy compliance, data protection, or a related field.
Experience conducting Privacy Impact Assessments (PIAs) and privacy risk analyses.
Familiarity with federal privacy laws and regulations, such as the Privacy Act and E-Government Act.
Exceptional written and oral communication skills, including the ability to explain complex privacy concepts to technical and non-technical stakeholders.
Strong analytical and critical-thinking skills to assess privacy risks and recommend solutions.
Working knowledge of privacy frameworks and regulations, including the Privacy Act, FISMA, and NIST privacy guidelines.
Experience drafting and reviewing privacy documentation, including PIAs, SORNs, and privacy policies.
Ability to work independently and collaboratively within a team environment.
Strong organizational skills and ability to manage multiple projects and deadlines.
Proficiency with Microsoft Office Suite, including Word, Excel, and PowerPoint.
Understanding of data lifecycle management and data minimization principles.
Ability to maintain confidentiality and exercise sound judgment when handling sensitive information.
Ability to obtain and maintain a Public Trust Clearance.

Nice To Haves

Experience working in a federal government environment supporting privacy compliance.
Certified Information Privacy Professional (CIPP/G or CIPP/US) certification.
Familiarity with FOIA processes and requirements.
Knowledge of NIST SP 800-53 privacy controls.
Experience with privacy compliance tracking tools and GRC platforms.
Familiarity with Agile methodologies and working within cross-functional project teams.

Responsibilities

Conduct Privacy Impact Assessments (PIAs) and Privacy Threshold Analyses (PTAs) for systems and programs handling personally identifiable information (PII).
Review and analyze system documentation to identify privacy risks and recommend mitigation strategies.
Assist in developing, reviewing, and maintaining privacy policies, procedures, and guidance documents.
Support compliance with applicable privacy laws and regulations, including the Privacy Act of 1974, the E-Government Act, and agency-specific requirements.
Collaborate with system owners, IT staff, and legal teams to integrate privacy requirements into system development lifecycles.
Assist in responding to privacy incidents, including supporting breach notification processes and corrective action plans.
Maintain and update System of Records Notices (SORNs) and other required privacy documentation.
Track and report privacy compliance metrics and remediation efforts.
Support privacy training and awareness initiatives for staff and stakeholders.
Respond to data subject access requests and Freedom of Information Act (FOIA) requests involving PII.
Monitor changes in privacy laws and regulations and assess potential impacts to the organization.
Participate in audits and assessments related to privacy compliance.