Privacy Officer (SME)

RELI GROUP INC • Woodlawn, MD

5d • $150,000 - $210,000

About The Position

RELI Group is seeking an experienced Privacy Officer to lead privacy policy, compliance, and data protection strategy under Task 8 of the Information Security and Privacy Services (ISPS), part of the Marketplace System Security and Privacy Support Services (MSSPSS) contract. The Privacy Officer will ensure ACA and NST systems meet federal privacy laws and CMS-specific privacy requirements while supporting data protection, transparency, and privacy risk mitigation efforts. This role will serve as a liaison with CMS stakeholders, provide expert guidance on privacy impact assessments, and oversee compliance with the Privacy Act, HIPAA, and CMS privacy directives.

Requirements

• Bachelor’s degree in Law, Public Policy, Cybersecurity, or a related field
• 6+ years of experience in privacy compliance, policy, or data governance roles supporting federal programs
• Demonstrated expertise with the Privacy Act, HIPAA, FISMA, and federal privacy frameworks
• Experience conducting PIAs, developing SORNs, and managing data privacy documentation
• Strong communication and stakeholder coordination skills
• Familiarity with integrating privacy into RMF and cybersecurity activities

Nice To Haves

• Experience supporting CMS, CCIIO, or other HHS programs
• Knowledge of CMS-specific privacy requirements, including guidance for ACA systems
• Certifications such as CIPP/G, CIPM, or CHPC
• Understanding of Zero Trust, data tagging, and privacy-enhancing technologies
• Experience collaborating with legal counsel, compliance officers, and data steward

Responsibilities

• Serve as the lead privacy advisor for ACA and NST systems, ensuring compliance with the Privacy Act, HIPAA, and CMS privacy policies
• Develop, review, and maintain privacy documentation including Privacy Impact Assessments (PIAs), System of Records Notices (SORNs), and Data Use Agreements (DUAs)
• Support privacy reviews for new systems, applications, and data-sharing initiatives
• Collaborate with CMS privacy and legal teams to address privacy-related questions, risks, and incident response efforts
• Ensure integration of privacy requirements into system lifecycle, security documentation, and ATO packages
• Monitor changes in privacy legislation and regulations, providing policy updates and strategic recommendations
• Provide training and awareness briefings related to privacy compliance and secure data handling
• Lead or support responses to OMB, OCR, and CMS privacy data calls or audits

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees