Security and Privacy SME

Dynanet Corporation•Falls Church, VA

2d•Hybrid

About The Position

The Security and Privacy SME will serve as the guardrail authority responsible for sensitivity classification validation, privacy controls implementation, and governance guardrails establishment across Federal healthcare data governance initiatives. This role ensures all data management activities comply with Federal security requirements, healthcare privacy regulations, and organizational policies while maintaining secure data handling throughout enterprise catalog operations.

Requirements

8+ years of experience in cybersecurity and/or technical data privacy
5+ years of experience safeguarding PII, PHI, and/or classified information at the technical level
Deep understanding of relevant DoD regulations and policies regarding the technical safeguarding of PII, PHI, and/or classified information
Experience working with NIST 800-53 and/or NIST 800-122 guidelines
Ability to translate technical knowledge into strategic recommendations
Keen attention to detail, especially in relation to technical policies and procedures
Knowledge of healthcare privacy regulations and Federal data classification requirements
Experience with security control implementation for enterprise data management systems
Possess Strong written and verbal communication skills
Highly organized with an ability to prioritize, balance, and effectively advance multiple competing priorities in a high-volume, fast-paced environment
Ability to interact in a professional and collaborative manner with fellow Dynanet Teammates and the clients, and business partners that we work with
Ability and desire to challenge and educate yourself to support and advance IT services delivery in the Federal agencies we serve
Excellent judgment and creative problem-solving skills
Respond to team member and client requests via email, MS teams, or other communication means during core business hours
Active listening skills to understand clients' needs, and collaboration skills to work with other developers and designers
BA in cybersecurity, information technology, computer science, or data science (MA preferred)
Active DoD High Risk Public Trust designation (Active DoD security clearance preferred)
Technical certification(s) in compliance with DoD Directive 8140 (CompTIA Sec+, CISSP, CISM, CEH, etc.) are preferred
Current database certifications (such as AWS, Azure, CDMP, Oracle SQL, IBM DB2, etc.) are preferred

Nice To Haves

12+ years of experience in cybersecurity and/or technical data privacy
8+ years of experience safeguarding PII, PHI, and/or classified information at the technical level
Experience interpreting and applying DoD privacy and security technical controls successfully to enterprise-level IT systems
Knowledge of federated catalog security architectures and metadata exchange security protocols
Experience with cloud security controls and compliance frameworks
Understanding of AI/ML security considerations and approved tool governance
Experience with automated compliance monitoring and security validation systems

Responsibilities

Validate sensitivity classification for data systems applying Controlled Unclassified Information (CUI), Protected Health Information (PHI), and Personally Identifiable Information (PII) classifications during metadata inventory activities
Implement and enforce privacy controls ensuring compliance with Health Insurance Portability and Accountability Act (HIPAA), Federal privacy regulations, and organizational security policies
Establish governance guardrails including role-based access controls (RBAC), data handling procedures, and security validation checkpoints for enterprise data catalog operations
Design and validate security architectures for interim centralized repositories ensuring encryption at rest and in transit, audit logging, and authorized access controls
Conduct security assessments for federated catalog integration including metadata exchange security, authentication protocols, and data protection mechanisms
Develop and implement automated compliance monitoring including security control validation, privacy impact assessments, and regulatory compliance reporting
Oversee security aspects of automated metadata harvesting ensuring secure extraction methods and protection of sensitive information during processing
Validate Artificial Intelligence (AI) tool usage compliance ensuring approved tools are used within authorized environments with appropriate data handling controls
Support User Acceptance Testing (UAT) security validation ensuring test scenarios maintain appropriate security controls and data protection measures
Create security documentation including technical security controls, privacy procedures, and compliance validation processes