Privacy Program Lead - Policy, Risk & Training

Smithsonian Institution; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Recruitment incentive

Health Insurance

Retirement Program

Job summary

The Smithsonian Institution seeks a Privacy Program Specialist to assist the Privacy Officer with daily privacy program operations and related activities. You will help coordinate, implement, and manage privacy initiatives across the Institution.

You will develop policy guidance, review IT and records for compliance, and deliver privacy training for managers and employees. You will also support breach response planning and incident handling as needed.

Qualifications

• One year of specialized experience equivalent to GS-12 in the Federal Service, performing privacy and information security duties.
• Experience conducting reviews of contracts and privacy laws; coordinating incident response; briefing on privacy implications of tech.
• Resume must be concise (two pages max) and clearly show alignment with responsibilities.

Responsibilities

• Coordinate, implement, and manage daily operations of the privacy program.
• Develop policy and procedural guidance for Smithsonian employees and affiliates.
• Review IT and paper records to ensure compliance with privacy laws and SI policy.
• Develop and deliver privacy training workshops for managers and staff.
• Provide breach/incident response planning and support for PII incidents.

Skills

Privacy program

Policy development

Training delivery

Incident response

IT systems reviews

Tools

Governance risk and compliance tool

Job description

The Smithsonian Institution seeks a Privacy Program Specialist to assist the Privacy Officer with daily privacy program operations and related activities. You will help coordinate, implement, and manage privacy initiatives across the Institution.

You will develop policy guidance, review IT and records for compliance, and deliver privacy training for managers and employees. You will also support breach response planning and incident handling as needed.