Acquisition Security & Privacy Analyst — Public Trust Ready

DLH Corp

Bethesda (MD)

On-site

USD 115,000 - 125,000

Full time

14 days+

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

PTO

Medical

Dental

Vision

401(k) matching

Training & e-learning

Job summary

DLH Corp is seeking an Acquisition Security & Privacy Analyst to join our team in Bethesda, MD. The role focuses on privacy compliance, acquisition security reviews, governance and risk activities across enterprise systems, cloud services, and emerging technologies.

You will collaborate with system owners, privacy officials, contract teams, cybersecurity personnel, and federal leadership to ensure procurements and operations meet federal security and privacy requirements.

Qualifications

Experience reviewing IT acquisitions, cloud services, and software procurements for security and privacy.
Experience supporting compliance with Privacy Act, E-Government Act, HIPAA, and HHS privacy requirements.
Development and maintenance of PIAs, PTAs, SORNs, Privacy Notices and related docs.
Knowledge of NIST 800-53, FISMA, Privacy Act requirements and federal compliance.
Experience with privacy incident response and vendor risk assessments.
Bachelor’s degree in information technology, cybersecurity, or related field.
Relevant certifications (e.g., CIPP/US, CIPM, CompTIA Security+, OneTrust) required.
Strong problem-solving and analytical capabilities; cross-team collaboration.
Familiarity with FedRAMP and cloud security concepts preferred.
Experience with ServiceNow, Jira, Confluence, Microsoft 365, and compliance tracking tools preferred.

Responsibilities

Review IT acquisitions, cloud services, and third-party technology solutions for security and privacy.
Document and support remediation of privacy incidents involving PII.
Evaluate security and privacy requirements for procurement packages.
Identify applicable security, privacy, and compliance clauses for acquisitions.
Coordinate with acquisition teams, CORs, ISSOs, and system owners to gather information and resolve issues.
Support process improvement and maintain SOPs.