Privacy Program Specialist

Smithsonian Institution; Washington (District of Columbia); On-site; USD 70,000 - 98,000; Full time

Job summary

The Smithsonian Institution in Washington, DC, is seeking a qualified candidate for a role within the Office of Contracting and Personal Property Management to manage contracting activities with a focus on privacy and information security. The position emphasizes specialized experience across multiple privacy and security domains.

Applicants should demonstrate experience in contract analysis, privacy compliance, and coordination of security-related audits.

Qualifications

• One year of specialized experience equivalent to at least the GS-12 level in the Federal Service.
• Specialized experience defined as five of the following duties: contract reviews with privacy/security implications; researching privacy laws; coordinating incident response; delivering briefings on privacy or security implications of technology; conducting privacy risk assessments; coordinating responses to annual information security audits.

Responsibilities

• Review contracts for privacy and information security implications.
• Research U.S. state and foreign privacy laws to ensure proper implementation of privacy requirements.
• Coordinate incident response activities.
• Develop and deliver briefings on privacy or security implications of existing or emerging technology (e.g., AI).
• Conduct privacy risk assessments within governance risk and compliance tools.
• Coordinate responses to annual information security audits.

Skills

Contract reviews

Privacy law research

Incident response coordination

Briefings on privacy/security

Privacy risk assessments

Audit coordination

Tools

Governance risk tool

Job description

The Smithsonian Institution is the world’s largest museum, education, and research complex, with 21 museums and the National Zoo. This position is located in the Office ofContracting and Personal Property Management (OCon & PPM). OCon & PPM is responsible for the overall planning, management and execution of SI’s contracting, acquisition and procurement, privacy, personal property and travel programs.

More than one selection may be made from this announcement.

Experience: You qualify for this position if you have one year of specialized experience equivalent to at least the GS-12 level in the Federal Service. For this position, specialized experience is defined as experience performing at least five of the following:

• (1) conducting reviews and analysis of contracts with privacy and information security implications;
• (2) conducting research on U.S. state and foreign privacy laws to ensure proper implementation of privacy requirements;
• (3) coordinating incident response activities;
• (4) developing and delivering briefings on the privacy or security implications of existing or emerging technology (e.g., Artificial Intelligence);
• (5) conducting privacy risk assessments within a governance risk and compliance tool;
• (6) coordinating responses to annual information security audits.

Your resume must be no more than two (2) pages and should clearly demonstrate how your experience aligns with the responsibilities and specialized experience required for this position. Do not copy language directly from the vacancy announcement, as you will be deemed ineligible for consideration. Instead, provide detailed, descriptive information about your actual experience.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Part-time and/or unpaid experience related to this position will be considered to determine the total number of years and months of experience. Be sure to note the number of paid or unpaid hours worked each week.