Sr. Privacy Analyst

Data Systems Analysts•Fairfax, VA

5d•Hybrid

About The Position

Data Systems Analysts, Inc. (DSA) is seeking a Senior Privacy Analyst to support a federal National Privacy Program (NPP), which implements and maintains agency-level privacy policies, procedures, standards, and guidelines. The role requires strong information privacy compliance skills and the ability to lead tasks with limited supervision. The analyst reports directly to the Program Manager. The Senior Privacy Analyst supports Agency Privacy Program compliance by assessing Privacy Threshold Analysis (PTA) questionnaires, reviewing and approving Privacy Impact Assessments (PIAs), coordinating publication of System of Records Notices (SORNs) with program offices, maintaining official Privacy Act files and the Agency Federal Information System Registry, and providing training or training opportunities for key privacy personnel. The role is hybrid, with work onsite at DSA or a customer site and potential telework; work location is flexible, with telework subject to approval. DSA is an Information Technology and Management Consulting firm serving federal, state, and local government and commercial clients. Its areas of focus include Knowledge & Information Management, Energy Management & Environmental Sustainability, Enterprise Systems Development & Operations, and Cyber Security and Information Assurance. DSA requires hired employees to have experience with Microsoft Copilot and/or an approved equivalent AI solution. The posted salary range is $100,000–$120,000; actual compensation depends on qualifications, experience, skills, and other job-related factors. Some positions may require the ability to obtain a security clearance, and applicants accepting a conditional offer may be subject to government security investigations and eligibility requirements. DSA conducts background checks where permitted by law and is an E-Verify Employer.

Requirements

U.S. citizenship.
Bachelor's degree and at least seven years of experience in a privacy, data protection, and/or information security compliance role.
Experience working for a U.S. federal government agency or contractor.
Demonstrated experience assessing risk and advising on organizational controls.
Skill applying government privacy laws, regulations, principles, and policies to assignments involving release of information to the public.
Skill analyzing legislation and regulations to determine their impact on program operations.
Knowledge of the Freedom of Information Act and the Privacy Act.
Knowledge of federal and agency records management systems, regulations, principles, and policies.
Ability to work with limited supervision and meet multiple project milestones and deadlines.
Excellent written and oral communication skills, including producing client-ready work and communicating complex technical issues to senior stakeholders and non-technical staff.
Experience working with Federal Information Security Modernization Act (FISMA) requirements and NIST guidelines, including NIST SP 800-53.
Demonstrated ability to prioritize and manage competing assignments in a time-sensitive environment.
Keen attention to detail and ability to solve problems using best practices and a systematic approach.
Experience with Microsoft Copilot and/or an approved equivalent AI solution.

Nice To Haves

Compliance or auditing experience.
Experience with Governance, Risk and Compliance (GRC) tools such as Telos Xacta IA Manager, CSAM, or RSA Archer.
Experience with the CDM Dashboard, SharePoint, or Qlik Sense.
Advanced privacy certification such as Certified Information Privacy Professional (CIPP), Certified Information Privacy Technologist (CIPT), Certified Information Privacy Manager (CIPM), or equivalent.

Responsibilities

Provide subject matter expertise on privacy and data protection to incorporate privacy-by-design into processes, critical projects, and initiatives.
Review PTA questionnaires to determine whether systems contain personally identifiable information (PII), require a PIA or SORN, or have other applicable privacy requirements.
Evaluate PIAs for conformance with applicable privacy laws, regulations, and policies; assess risks and effects; and evaluate protections and alternative processes to mitigate privacy risks.
Lead and coordinate privacy data calls across the Agency.
Assist in evaluating NIST SP 800-53 Privacy controls used to safeguard and secure PIAs in Agency systems operating in the information environment.
Maintain the Federal Information System Registry for Privacy.
Train Agency Liaison Privacy Officials (LPOs) and other stakeholders, as required, on privacy matters, topics, trends, and issues related to PTAs and PIAs.
Ensure the Agency complies with privacy laws, statutes, policies, and regulatory documents to safeguard PII, and that stakeholders address privacy requirements in published directives with accurate information.
Keep abreast of developments in privacy laws, regulations, and industry standards.
Collect customer satisfaction and internal service performance feedback to foster continual improvement.