Remote Privacy Analyst (Entry) - Data Privacy & Compliance

MBL Technologies; Washington (District of Columbia); Hybrid; USD 70,000 - 90,000; Full time

Benefits offered by this job

Remote work

401K match

PTO

Job summary

MBL Technologies, Inc. is seeking an Entry Privacy Analyst to support privacy consulting for client security assessments in the Washington, D.C. metro area.

This remote role requires occasional onsite work and focuses on privacy documentation and policy governance. You will review PTAs, PIAs, and SORNs, update privacy controls, and coordinate with Legal, Privacy, and IT teams to embed privacy protections throughout the system development lifecycle.

Qualifications

• 3+ years advising on privacy compliance and data privacy policies.
• Hands-on experience implementing NIST SP 800-53 Rev. 5 privacy controls.
• Experience authoring Privacy Impact Assessments (PIAs) and Systems of Records Notices (SORNs).
• Experience identifying, handling, and protecting Personally Identifiable Information (PII).
• Ability to communicate privacy concepts clearly to technical and non-technical audiences.

Responsibilities

• Review Privacy Threshold Analyses (PTAs), PIAs, and SORNs.
• Develop, update, and maintain privacy documentation per regulations and standards.
• Coordinate privacy activities with Legal, Privacy, and IS teams.
• Create and communicate privacy policies and procedures to stakeholders.
• Ensure privacy protections are embedded throughout the system development lifecycle.

Skills

Privacy compliance

NIST SP 800-53 Rev. 5 privacy controls

PIA/SORN authoring

PII handling

Clear communication

Written communication

Education

Bachelor’s degree

Job description

MBL Technologies, Inc. is seeking an Entry Privacy Analyst to support privacy consulting for client security assessments in the Washington, D.C. metro area.

This remote role requires occasional onsite work and focuses on privacy documentation and policy governance. You will review PTAs, PIAs, and SORNs, update privacy controls, and coordinate with Legal, Privacy, and IT teams to embed privacy protections throughout the system development lifecycle.