Acquisition Security & Privacy Analyst (Job 1456)

DLH Corporation; Bethesda (MD); Hybrid; USD 115.000 - 125.000; Vollzeit

Zusammenfassung

DLH Corporation in Bethesda, Maryland, is seeking an Acquisition Security & Privacy Analyst to drive privacy compliance, acquisition security reviews, governance, and risk activities across enterprise systems, cloud services, and emerging technologies.

You will collaborate with system owners, privacy officials, contract teams, and federal leadership to ensure procurements meet federal security and privacy requirements.

Qualifikationen

• Minimum of three (3) years of experience reviewing and assessing IT acquisitions, cloud services, SaaS offerings, AI-enabled technologies, and software procurements for security, privacy, records management, and compliance requirements.
• Experience supporting compliance with the Privacy Act, E-Government Act, HIPAA, and HHS privacy requirements.
• Prior experience developing and maintaining: Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), System of Record Notices (SORNs), Privacy Act Statements, and Privacy Notices and related documentation
• Familiarity with NIST 800-53, FISMA, Privacy Act requirements, and federal compliance frameworks
• Experience supporting privacy incident response and/or vendor risk assessments
• Must be able to obtain a Public Trust clearance

Aufgaben

• Review IT acquisitions, cloud services, and third-party technology solutions for security and privacy considerations.
• Assist with tracking, documenting, and remediating privacy incidents involving PII.
• Assist in evaluating security and privacy requirements for procurement packages.
• Support identification of security, privacy, and compliance clauses for acquisitions.
• Coordinate with acquisition teams, CORs, ISSOs, and system owners to gather information and resolve compliance issues.
• Support process improvement initiatives and maintenance of standard operating procedures

Kenntnisse

Privacy compliance

Acquisition security reviews

PIAs/PTAs

Cloud security

Cross-team collaboration

Ausbildung

Bachelor’s degree in information technology or cybersecurity

Tools

ServiceNow

Jira

Confluence

Microsoft 365

Compliance tracking tools

Jobbeschreibung

Acquisition Security & Privacy Analyst (Job 1456)

Bethesda, Maryland

About Us

DLH delivers improved health and national security readiness solutions for federal programs through science, research and development, systems engineering and integration, and digital transformation. Our experts in public health, performance evaluation, and health operations solve the complex problems faced by civilian and military customers alike by leveraging advanced tools – including digital transformation, artificial intelligence, data analytics, cloud enablement, modeling, and simulation, and more. DLH is dedicated to the idea that “Your Mission is Our Passion” and brings a unique combination of government sector experience, proven methodology, and unwavering commitment to innovation to improve the lives of millions.

Overview

DLH is seeking an Acquisition Security & Privacy Analyst to join our team. The Acquisition Security & Privacy Analyst is responsible for privacy compliance, acquisition security reviews, governance and risk activities, and security authorization support across enterprise systems, cloud services, and emerging technologies. This resource works with system owners, privacy officials, contract teams, cybersecurity personnel, and federal leadership to ensure technology procurements and operational systems comply with federal security, privacy, and regulatory requirements.

Responsibilities

• Experience reviewing IT acquisitions, software purchases, cloud services, and third-party technology solutions for security and privacy considerations
• Assist with tracking, documenting, and supporting remediation of privacy incidents involving PII and sensitive information
• Assist in evaluating security and privacy requirements for procurement packages
• Support identification of applicable security, privacy, and compliance clauses for acquisitions
• Coordinate with acquisition teams, CORs, ISSOs, and system owners to gather required security and privacy information and resolve compliance issues
• Support process improvement initiatives and maintenance of standard operating procedures

Qualifications

• Minimum of three (3) years of experience reviewing and assessing IT acquisitions, cloud services, SaaS offerings, AI-enabled technologies, and software procurements for security, privacy, records management, and compliance requirements.
• Experience supporting compliance with the Privacy Act, E-Government Act, HIPAA, and HHS privacy requirements
• Prior experience developing and maintaining: Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), System of Record Notices (SORNs), Privacy Act Statements, and Privacy Notices and related documentation
• Familiarity with NIST 800-53, FISMA, Privacy Act requirements, and federal compliance frameworks
• Experience supporting privacy incident response and/or vendor risk assessments
• Bachelor’s degree in information technology, Cybersecurity, or a related field.
• Relevant certifications (e.g., CIPP/US, CIPM, CompTIA Security+, OneTrust Privacy Management Professional) required
• Excellent problem-solving and analytical skills.
• Strong cross-team collaboration and coordination across diverse audiences and stakeholders
• Familiarity with FedRAMP and cloud security concepts (preferred)
• Experience with ServiceNow, Jira, Confluence, Microsoft 365, and compliance tracking tools (preferred)
• Must be able to obtain a Public Trust clearance

Basic Compensation: $115,000 - $125,000 yearly salary

The salary range listed reflects what we reasonably expect to pay for this role at the time of posting. The final offer may vary based on skills, experience, geographic location, market conditions, and internal equity. Additional compensation may include performance incentives and program-specific awards. We do not use salary history to determine compensation, in line with applicable law.

DLH Corp offers our employees an excellent benefits package, including Personal Time Off (PTO), medical, dental, vision, supplemental life with AD&D, disability coverage, flexible spending accounts, and more. We want our employees to save for their future; therefore, we offer a 401(k) Retirement Plan, which includes a matching component. DLH is dedicated to your career development, providing training to help drive success, with access to our best-in-class e-learning suite for formal and informal learning, professional and technical certification preparation, and education assistance at accredited institutions.

EEO

DLH Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment. DLH will provide reasonable accommodation to individuals with disabilities and disabled Veterans who need assistance to apply.

DLH is committed to maintaining a fair and authentic interview process

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in DLH ’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.