Privacy Risk & Compliance Specialist

Smithsonian Institution; Washington (District of Columbia); On-site; USD 70,000 - 98,000; Full time

Job summary

The Smithsonian Institution in Washington, DC, is seeking a qualified candidate for a role within the Office of Contracting and Personal Property Management to manage contracting activities with a focus on privacy and information security. The position emphasizes specialized experience across multiple privacy and security domains.

Applicants should demonstrate experience in contract analysis, privacy compliance, and coordination of security-related audits.

Qualifications

• One year of specialized experience equivalent to at least the GS-12 level in the Federal Service.
• Specialized experience defined as five of the following duties: contract reviews with privacy/security implications; researching privacy laws; coordinating incident response; delivering briefings on privacy or security implications of technology; conducting privacy risk assessments; coordinating responses to annual information security audits.

Responsibilities

• Review contracts for privacy and information security implications.
• Research U.S. state and foreign privacy laws to ensure proper implementation of privacy requirements.
• Coordinate incident response activities.
• Develop and deliver briefings on privacy or security implications of existing or emerging technology (e.g., AI).
• Conduct privacy risk assessments within governance risk and compliance tools.
• Coordinate responses to annual information security audits.

Skills

Contract reviews

Privacy law research

Incident response coordination

Briefings on privacy/security

Privacy risk assessments

Audit coordination

Tools

Governance risk tool

Job description

The Smithsonian Institution in Washington, DC, is seeking a qualified candidate for a role within the Office of Contracting and Personal Property Management to manage contracting activities with a focus on privacy and information security. The position emphasizes specialized experience across multiple privacy and security domains.

Applicants should demonstrate experience in contract analysis, privacy compliance, and coordination of security-related audits.