The Privacy & Data Sharing Specialist will execute the following responsibilities:
Support analysis of systems, programs, and/or planning activities related to data privacy and data sharing across the CMM program.
Perform research in support of privacy policies, procedures, and other technical documentation, and support analysis of data governance and data-sharing programs and initiatives.
Research and analyze options to develop relationships and solutions that resolve data privacy and data-sharing problems within the specialty area.
Analyze privacy- and data-related technical problems and provide engineering and technical support in solving them.
Design, develop, engineer, and implement solutions that meet data privacy and data-sharing requirements.
Perform privacy risk analyses (e.g., Privacy Impact Assessments) of computer systems and applications during all phases of the system development life cycle.
Establish and satisfy complex system-wide data privacy and classification requirements based on the analysis of user, policy, regulatory, and resource demands.
Support customers in the development and implementation of data privacy and data-sharing policies.
Define and maintain data classification, retention, and handling rules for sensitive, court-related, and personally identifiable information (PII).
Draft, review, and administer data sharing agreements, memoranda of understanding (MOUs), and interconnection security agreements (ISAs) with external agencies and partners.
Partner with data governance, legal, and engineering teams to ensure data-sharing practices comply with the Privacy Act, court rules, and other applicable federal regulations.
Maintain a data sharing inventory and monitor ongoing agreements for renewal, compliance, and risk.
Advise program stakeholders on privacy-by-design principles for new data platform, reporting, and analytics capabilities.
QUALIFICATIONS
BS/BA degree with 5+ years of experience of general experience in information systems providing enterprise cybersecurity through policy, architecture, and training processes.
Experience developing plans to safeguard sensitive data against accidental or unauthorized modification, destruction, or disclosure.