Privacy Lead

Remote | Must be Local to Washingon D.C. | As Needed Onsite

US Citizenship - Clearable; Ability to obtain a Public Trust is Required

Summary

Our client is an employee and Service-Disabled, Veteran-owned Small Business focused on providing niche technical services. They are a team of experienced cybersecurity professionals with a track record of success in the Federal, Commercial, and Academic workspaces. Additionally, our client designs, builds, operates, and secures scalable cloud and IT infrastructures to meet their customers’ near-term needs and fulfill their long-term requirements.

Responsibilities

Our client is looking for an experienced Privacy Lead to support the USCB's Enterprise Cybersecurity Program and OIS operational strategic goals. The role encompasses responsibilities across multiple domains, ensuring compliance with privacy and data governance mandates, helping shape policy, and raising training and awareness across the organization. The Privacy Lead will work closely with teams involved in risk management, audit management, security control assessments, and continuous monitoring.

• Lead the privacy and data governance initiatives within the organization, ensuring adherence to relevant federal regulations and internal policies
• Develop, maintain, and disseminate privacy and data governance policies and procedures
• Conduct privacy and security risk assessments and manage mitigation strategies
• Work closely with the cybersecurity team for enterprise audit log aggregation and security risk assessments
• Collaborate with training and awareness teams to develop and deliver privacy-related training materials
• Oversee audit management, working with internal and external auditors to ensure compliance with privacy and data governance requirements
• Engage with the security control assessments team to identify and address potential privacy and data risks
• Assist in the continuous monitoring of the organization's systems and data to ensure privacy and security
• Provide privacy expertise in the management of cybersecurity tools
• Participate in incident response activities and Adhoc tabletop exercises
• Support the cybersecurity architect and engineering services team, incorporating privacy considerations into system design and development
• Facilitate response activities, including digital and network forensics, incident management, and communication, and fulfill federal reporting requirements
• Enhance cyber defense and detection capabilities with a focus on privacy protection

Requirements

• 8-10 years of experience in Privacy, Policy, and Data Governs
• Proven experience in privacy and data governance in a large organization, preferably within the public sector
• Proficient understanding of privacy laws, regulations, and best practices
• Strong communication, analytical, and organizational skills
• Ability to work in a team and manage multiple tasks simultaneously
• Experience with cybersecurity tools and techniques, including risk assessments, audit management, and continuous monitoring

Preferred Requirements

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Information Security Manager (CISM)
• Information Privacy Professional (CIPP/US) for Government certification in order to assist the USCB with its compliance and risk mitigation practices

Education/Certification Requirements

• None

Clearance Requirements

• Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Applicants must be able to pass an enhanced background check.