Privacy Program Specialist 3 (In Training) or Privacy Program Specialist 4

State of Washington•Thurston County – Tumwater, WA

13d•Hybrid

About The Position

Would you thrive in a role focused on guiding the Department of Retirement Systems (DRS) as we continue to protect the privacy of our members’ information and sustain their hard-earned trust? Would you enjoy serving as the privacy subject matter expert focused on elevating agency awareness of privacy best practices? And, is working in a cooperative culture of continuous improvement, learning, and work-life balance important to you? If your answer is Yes, the role as the Privacy Program Specialist could be the perfect opportunity for you! This recruitment will remain open until filled. Applicants who apply by 8:00 am on Monday, July 13, 2026, will get first consideration. The hiring manager reserves the right to make a hiring decision at any time during the recruitment process. The Department of Retirement Systems has an exciting opportunity for you to be our Privacy Program Specialist. Depending on your experience, you may be hired as a Program Specialist 4 or as a Program Specialist 3 (in-training). If hired as a Program Specialist 3 In-Training, you will be required to successfully complete a 12-month training plan to promote to the goal class of Program Specialist 4. The in-training is intended to provide an opportunity to gain the required experience on the job as part of a formal “in-training” plan. Reporting to the Risk Management Director, the Privacy Program Specialist will help shape the agency’s privacy program. In this collaborative role you will be responsible for furthering the goals, maturation, and management of the agency’s organization-wide privacy program in alignment with the WaTech Office of Privacy and Data Protection (OPDP) Privacy Framework.

Requirements

Demonstrated proficiency and proven experience in conducting privacy impact assessments, updating privacy policies, influencing decisions about managing and protecting confidential information, and responding to privacy concerns. Similar work in a privacy adjacent program or area may also qualify. Examples of privacy adjacent work may include but are not limited to: managing public records requests, risk management, or fraud prevention.
Proactively identifying program needs and producing clear written materials (e.g. SOPs, templates, procedures, training plans etc.);
Gathering information through methods such as surveys, interviews, and/or document/process review, and analyzing that data to identify risks or gaps in controls across an organization’s privacy (or privacy adjacent) program (beyond a single initiative or system);
Making data-driven recommendations to mature program goals;
Delivering training to support the program and increase agency awareness.
Demonstrated experience and proficiency in the use of Microsoft Word, Excel, and PowerPoint, (version 2016 or newer)
Demonstrated proficiency in the following competency areas: Analysis - Studies and reviews documents and information closely; readily identifies information that is not pertinent and understands when additional or verifying data is needed. Uses data and information in a clear and rational thought process to assess and understand issues, evaluate options, form accurate conclusions, and make recommendations.
Customer Focus - Dedicated to meeting the expectations and requirements of customers. Partners to deliver high quality services and products. Establishes and maintains effective customer relationships. Committed to continuous improvement and always acts with the customer in mind.
Problem Solving - Analyzes problem to identify the root cause(s). Evaluates possible courses of action; uses reason, logic, and creativity to reach conclusions. Develops timely, effective solutions that take into consideration alternatives, risks, and consequences in relation to organizational goals, resources, and constraints.
Communication - Effectively conveys information in writing and through the spoken word, using language that is appropriate to both the complexity of the topic and the knowledge and understanding of the audience. Sees communication as a vital component of high performing teams.
Teaching and Training - Effectively communicates information for the purpose of having others learn, understand, and apply specific principles, techniques, or information. Accurately assesses the training needs of individuals, identifying both strengths and areas to be developed.
Meeting the Needs of Others - Demonstrates empathy, flexibility, and responsiveness when interacting with customers, colleagues, and community members. Understands that others have varied needs and perspectives and adapts communication and actions accordingly. Builds relationships and collaborates to increase access, opportunity, and positive outcomes for all. Balances and considers all parties’ needs when developing solutions, ensuring equity, respect, and service excellence in every interaction.
Judgment - Displays balanced thinking that combines data-based analysis, experience, and perspective while also considering decision impacts. Effectively weighs alternatives and makes decisions that incorporate facts, opinions, and other relevant information.
Dependability - Shows commitment, dedication, and accountability in work. Works effectively and fulfills commitments made to customers, peers, and team members. Is reliable in punctuality and attendance; can be counted on to get things done.
Learning and Growth - Demonstrates a growth mindset by actively seeking opportunities to learn, improve, and expand capabilities. Displays curiosity about new ideas and perspectives and an openness to innovation, change, and feedback. Takes responsibility for personal learning by identifying and communicating needs and challenges, and applying new knowledge to navigate systems, tools, and processes. Reflects on experiences to identify strengths and areas for improvement, using learning to make government programs and processes more efficient and effective in serving the people of Washington.

Nice To Haves

Proven experience maintaining and maturing an organization-wide government privacy program and/or advising on agency privacy practices and recommending improvement opportunities is highly desired.

Responsibilities

Administering and directing the agency’s privacy program, ensuring alignment with WaTech OPDP’s Privacy Policy.
Partnering with DRS divisions to assess and evaluate the current agency privacy risks and mitigation practices with special attention to systems that contain personally identifiable information (PII).
Applying knowledge gained from internal assessments to produce an organization-wide self-assessment which will be updated annually.
Designing and delivering annual privacy training and awareness materials to strengthen agency-wide understanding of privacy risks.
Leading required OPDP Privacy Threat Assessments (PTA) and/or Privacy Impact Analysis (PIA).
Facilitating the ongoing inventory of sensitive information and evaluating third-party data sharing practices in partnership with IT, Legal, and the contracting unit.
Reviewing new or updated Data Sharing Agreements (DSAs) for consistency with privacy laws and principles and making recommendations.
As a backup to the Fraud Prevention Analyst, supporting customer account research and fraud analysis activities, and related coordination with Division Business Units.