Privacy Compliance Analyst - Senior

MBL Technologies•Washington, DC

3d•Onsite

About The Position

MBL Technologies, Inc. is seeking a Senior Privacy Compliance Analyst to support federal government privacy programs and initiatives. The role focuses on protecting sensitive information, strengthening privacy governance, and helping federal agencies comply with applicable laws, regulations, and policies. The analyst will collaborate with privacy officials, program stakeholders, legal teams, and IT security professionals to identify and mitigate privacy risks, improve compliance processes, and support agency mission objectives. The position is fully onsite five days a week in the DC Metro area.

Requirements

Bachelor’s degree in information technology, cybersecurity, information systems, business administration, or a related field.
At least 8 years of professional experience supporting privacy compliance, information protection, or privacy risk management programs.
Demonstrated experience supporting federal government privacy programs.
Strong working knowledge of the Privacy Act of 1974, E-Government Act of 2002, OMB privacy guidance, and applicable federal privacy requirements.
Hands-on experience developing, reviewing, or managing PIAs, PTAs, SORNs, and related privacy compliance documentation.
Experience supporting privacy incident investigations, breach response coordination, and corrective action activities.
Familiarity with NIST SP 800-53, FISMA, and federal information security and privacy compliance frameworks.
Experience developing privacy policies, SOPs, training materials, and compliance reports.
Experience with privacy governance, risk, and compliance (GRC) platforms and incident tracking systems.
Experience supporting privacy breach response exercises and agency-wide privacy training initiatives.
Familiarity with Authority to Operate (ATO) processes, Plans of Action and Milestones (POA&Ms), and federal compliance reporting.
Strong analytical, organizational, written communication, and stakeholder engagement skills.
Professional certification such as CIPP/US, CIPM, CISM, or CISA; marked as required in the posting.
Ability to obtain and maintain the required federal background investigation or suitability determination.

Nice To Haves

Advanced degree in information systems, cybersecurity, business administration, or a related discipline.

Responsibilities

Support federal privacy programs in accordance with the Privacy Act of 1974, E-Government Act of 2002, HIPAA as applicable, FISMA, OMB guidance, and NIST standards.
Develop, review, and maintain Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), System of Records Notices (SORNs), and related compliance documentation.
Identify and assess privacy risks associated with information systems, emerging technologies, and data-sharing activities, and recommend mitigation strategies.
Support privacy breach investigations, incident documentation, reporting, remediation, and coordination with internal stakeholders.
Develop and maintain privacy policies, standard operating procedures, compliance reports, and program metrics to support regulatory requirements and continuous improvement.
Develop and deliver privacy awareness training, guidance materials, and technical assistance to federal program offices and stakeholders.
Work with privacy officials, legal counsel, cybersecurity teams, and program leadership to integrate privacy requirements into agency operations and information systems.