Privacy Compliance Analyst - Senior

MBL Technologies•Washington, DC

2h•Onsite

About The Position

MBL Technologies, Inc. is seeking an experienced Privacy Compliance Analyst - Senior to support federal government privacy programs and initiatives. The role supports protection of sensitive information, strengthens privacy governance, and helps federal agencies comply with applicable laws, regulations, and policies. The analyst collaborates with privacy officials, program stakeholders, legal teams, and IT security professionals to identify and mitigate privacy risks, improve compliance processes, and support agency mission objectives. The position is fully onsite five days a week in the DC Metro area. Candidates must be able to obtain and maintain the required federal background investigation or suitability determination. A professional certification such as CIPP/US, CIPM, CISM, or CISA is required.

Requirements

Bachelor’s degree in information technology, cybersecurity, information systems, business administration, or a related field.
At least 8 years of professional experience supporting privacy compliance, information protection, or privacy risk management programs.
Demonstrated experience supporting federal government privacy programs.
Strong working knowledge of the Privacy Act of 1974, E-Government Act of 2002, OMB privacy guidance, and applicable federal privacy requirements.
Hands-on experience developing, reviewing, or managing PIAs, PTAs, SORNs, and related privacy compliance documentation.
Experience supporting privacy incident investigations, breach response coordination, and corrective action activities.
Familiarity with NIST SP 800-53, FISMA, and federal information security and privacy compliance frameworks.
Experience developing privacy policies, SOPs, training materials, and compliance reports.
Experience with privacy governance, risk, and compliance (GRC) platforms and incident tracking systems.
Strong analytical, organizational, written communication, and stakeholder engagement skills.
Professional certification such as CIPP/US, CIPM, CISM, or CISA is required.
Ability to obtain and maintain the required federal background investigation or suitability determination.

Nice To Haves

Advanced degree in information systems, cybersecurity, business administration, or a related discipline.
Familiarity with Authority to Operate (ATO) processes, Plans of Action and Milestones (POA&Ms), and federal compliance reporting.

Responsibilities

Support federal privacy programs in accordance with the Privacy Act of 1974, E-Government Act of 2002, HIPAA as applicable, FISMA, OMB guidance, and NIST standards.
Develop, review, and maintain Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), System of Records Notices (SORNs), and related compliance documentation.
Identify and assess privacy risks associated with information systems, emerging technologies, and data-sharing activities, and recommend mitigation strategies.
Support privacy breach investigations, incident documentation, reporting, remediation, and coordination with internal stakeholders.
Develop and maintain privacy policies, standard operating procedures (SOPs), compliance reports, and program metrics.
Develop and deliver privacy awareness training, guidance materials, and technical assistance to federal program offices and stakeholders.
Work with privacy officials, legal counsel, cybersecurity teams, and program leadership to integrate privacy requirements into agency operations and information systems.
Support privacy breach response exercises and agency-wide privacy training initiatives.