Procurement Security & Privacy Analyst

DLH; Bethesda (MD); On-site; USD 115,000 - 125,000; Full time

Job summary

DLH is seeking an Acquisition Security & Privacy Analyst in Bethesda, MD to manage privacy compliance, acquisition security reviews, governance and risk activities across enterprise systems and cloud services. You will work with system owners, privacy officials, contract teams, and federal leadership to ensure procurements meet security and regulatory requirements.

The role requires reviewing IT acquisitions, developing PIAs/PTAs/SORNs, and supporting privacy incident response with COI/ vendor

Qualifications

• Experience reviewing IT acquisitions, cloud services, and software procurements for security and privacy.
• Experience with privacy acts and regulations (Privacy Act, E-Government Act, HIPAA, and HHS privacy requirements).
• Developing and maintaining PIAs, PTAs, SORNs, Privacy Act Statements, and Privacy Notices.
• Familiarity with NIST 800-53, FISMA, Privacy Act requirements, and federal compliance frameworks.
• Experience supporting privacy incident response and vendor risk assessments.
• Bachelor’s degree in information technology, cybersecurity, or a related field; relevant certifications preferred.

Responsibilities

• Experience reviewing IT acquisitions, software purchases, cloud services, and third-party technology solutions for security and privacy considerations
• Assist with tracking, documenting, and remediation of privacy incidents involving PII and sensitive information
• Assist in evaluating security and privacy requirements for procurement packages
• Support identification of applicable security, privacy, and compliance clauses for acquisitions
• Coordinate with acquisition teams, CORs, ISSOs, and system owners to gather required security and privacy information and resolve compliance issues
• Support process improvement initiatives and maintenance of standard operating procedures
• Must be able to obtain a Public Trust clearance

Skills

Problem-solving

Analytical skills

Cross-team collaboration

Public Trust clearance (to obtain)

Education

Bachelor’s degree in information technology or cybersecurity

Tools

ServiceNow

Jira

Confluence

Microsoft 365

Compliance tracking tools

Job description

DLH is seeking an Acquisition Security & Privacy Analyst in Bethesda, MD to manage privacy compliance, acquisition security reviews, governance and risk activities across enterprise systems and cloud services. You will work with system owners, privacy officials, contract teams, and federal leadership to ensure procurements meet security and regulatory requirements.

The role requires reviewing IT acquisitions, developing PIAs/PTAs/SORNs, and supporting privacy incident response with COI/ vendor