Sr. Information Security /Privacy Analyst-REMOTE

Company: Data Systems Analysts, Inc.
Location: Washington
Posted on: January 28, 2023

Job Description:

DSA is looking to hire a results-oriented Senior Information Security/Privacy Analyst to work remotely with accessibility to Washington DC. The hired person, must come into DC to get equipment as requested. Our Senior Information Security / Privacy Analyst must demonstrate excellent problem solving and communication skills to work on our team.
The work schedule is 8 AM - 5 PM EST which is our customers' requirements.
Requirements include but are not limited to:

• 
  
• US Citizenship and a BS in IT or related field.
  
• 7+ years or more of relevant job experience, including experience in privacy, data protection, and/or information security compliance role
  
• Experience reviewing PTA questionnaires, PIAs, and other privacy requirements.
  
• Information Security (e.g., CISSP, CISM, etc.) or Privacy (e.g., CIPP, CIPT, CIPM, etc.) certification
  
• Experience supporting the Federal Government
  
• Experience applying, analyzing and assessing information systems and security controls (NIST SP800-53, Revision 5)
  
  
  The ideal candidate will report directly to the Senior Technical Privacy Advisor and have strong information security and privacy compliance skills and the ability to lead tasks with limited supervision. The candidate should have strong data analysis skills. The Senior Information Security/Privacy Analyst will be part of a federal Agency Privacy Program, which is responsible for implementing and maintaining agency level privacy policies, procedures, standards, and guidelines. The Senior Information Security/Privacy Analyst will be responsible for a variety of tasks including but not limited to:
  Identifying and implementing remediation measures for system vulnerabilities and applying, selecting and testing the NIST family of security controls.
  Providing subject matter expertise on privacy and data protection to help incorporate privacy-by-design into processes, critical projects and initiatives.
  Reviewing PTA questionnaires used to determine if an information technology system contains PII, whether a PIA is required, whether a SORN is required, and if any other privacy requirements apply to the system.
  Evaluating PIAs to ensure conformance with applicable legal, regulatory, and policy requirements for privacy; determine the risks and effects; and evaluate protections and alternative processes to mitigate potential privacy risks.
  Leading and coordinate privacy data calls across the Agency.
  Assist with the evaluation of NIST SP 800-53 Privacy controls which will be used to safeguard and secure PIA in Agency systems operating in the information environment.
  Coordinating the publication of System of Record Notices (SORNs) with program offices and maintaining the official Privacy Act files.
  Maintaining the Federal Information System (FIS) Registry.
  Training Agency Liaison Privacy Official (LPOs) and other stakeholders, as required, on Privacy matters, topics, trends and issues relating to PTAs and PIAs.
  Ensuring that the Agency is complying with FISMA, Privacy laws, statutes, policies, and regulatory documents to safeguard PII and that Agency Stakeholders are addressing Privacy requirements, as outlined in published directives and are implemented with accurate information.
  Keeping abreast of current developments in information security, governance, privacy laws, regulations and industry standards.
  
  COVID-19 continues to significantly impact our communities, families and employees. With employee health and safety as our top priority DSA is taking action to address the increased risk and uncertainty COVID variants pose in the workplace. DSA will require all newly hired employees to be fully vaccinated before their start date and show proof of vaccination on the first day of employment along with all I9 required forms. Approved Waivers are permitted. Any medical records are only to be provided via instruction from HR and with approval from DSA management for any access to customer facilities.
  #DSA209
  #LI-AH1
  #LI-REMOTE

Keywords: Data Systems Analysts, Inc., Washington DC , Sr. Information Security /Privacy Analyst-REMOTE, Professions , Washington, DC