Chantilly, VA, 20151, USA
3 days ago
Cybersecurity Privacy Analyst
Koniag Data Solutions (KDS), a Koniag Government Services (KGS) company, is seeking a Cybersecurity Privacy Analyst to support our privacy program and ensure compliance with federal regulations, standards, and best practices. This role will work closely with the Assistant Privacy Officer to maintain privacy documentation, analyze compliance gaps, and implement privacy controls across the organization. The ideal candidate will have strong analytical skills, experience with privacy regulations, and the ability to collaborate across teams to ensure the protection of personally identifiable information (PII) and controlled unclassified information (CUI). This position offers a competitive compensation package, comprehensive benefits, and opportunities for professional growth. We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more. **Essential Functions, Responsibilities & Duties may include, but are not limited to:** The Cybersecurity Privacy Analyst will be responsible for maintaining and enhancing the organization's privacy program. Principal responsibilities include: + Review and update privacy documentation as required including but not limited to Privacy Impact Assessments (PIA), Privacy Threshold Assessments (PTA), System of Records Notices (SORNs), and Security Impact Assessments (SIA) in support of the Assistant Privacy Officer + Perform analysis of current privacy posture to determine compliance gaps with federal and departmental requirements, regulations, laws, standards, and best practices + Review and update privacy policies and procedures as requested; maintain an inventory of policies and procedures needed to support the Privacy Program + Analyze, document, and maintain agreements to share data for all appropriate information systems + Assist with developing the Privacy Information Map (PIM) that identifies PII and CUI processed or stored in IT applications and databases to ensure such holdings are accurate, relevant, timely, and complete + Implement a process to review for Privacy Information in all applications to validate that database data flow diagrams, schemas, and design documents are up to date + Review and maintain PII incident handling procedures and assist in investigating PII incidents + Maintain agency-wide Data Protection Policy + Review and update Privacy Baseline Requirements for all information systems that include program and project level privacy controls + Review and analyze Artificial Intelligence use cases to identify privacy risks + Provide privacy-related training to employees on data protection policies and best practices **_Requirements:_** + Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Law, or related field + 3+ years of experience in privacy, cybersecurity, or compliance roles + Experience with federal privacy regulations, including the Privacy Act, FISMA, and related NIST standards + Knowledge of privacy impact assessment processes and privacy control implementations + Experience with documentation review and policy development + In-depth knowledge of privacy laws, regulations, and frameworks applicable to federal agencies + Experience with privacy documentation including PIAs, PTAs, SIAs, and SORNs + Strong analytical skills with the ability to identify compliance gaps and recommend remediation actions + Proficiency in evaluating systems and applications for privacy risks and implementing appropriate controls + Experience in data mapping and data flow documentation + Knowledge of incident response procedures related to PII breaches + Excellent written and verbal communication skills + Ability to translate complex technical and regulatory requirements into actionable policies and procedures + Experience providing privacy awareness training to diverse audiences + Strong attention to detail and organizational skills + Ability to work independently and prioritize tasks effectively **Desired Skills and Competencies:** + Professional certifications such as CIPP/G, CIPM, CISSP, or equivalent + Experience working in federal government agencies + Knowledge of the NIST Privacy Framework and NIST SP 800-53 privacy controls + Experience with the Federal Risk and Authorization Management Program (FedRAMP) + Knowledge of artificial intelligence and machine learning privacy implications + Experience with privacy automation tools or governance, risk, and compliance (GRC) platforms + Understanding of cloud security and privacy considerations + Experience with privacy-by-design methodologies + Knowledge of controlled unclassified information (CUI) handling requirements + Experience with data governance and data protection programs **Our Equal Employment Opportunity Policy** The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment. The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations. _Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit_ _www.koniag-gs.com_ _._ **_Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352_** **Job Details** **Job Family** **IT, Cyber Security, Network Systems** **Job Function** **Information Security/Privacy Analyst** **Pay Type** **Salary** **Education Level** **Bachelor’s Degree**
Confirmar seu email: Enviar Email