Senior Enterprise Data Privacy Analyst

System One; Merrifield (VA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

System One is seeking a Senior Enterprise Privacy Governance and Risk Management Analyst in a multiyear contract. The role focuses on maturing enterprise privacy programs within a highly regulated environment, with emphasis on governance, PIAs/PRAs, 2LOD oversight, and AI privacy governance.

The candidate will deliver practical governance artifacts, risk assessments, and executive reporting. The position requires extensive experience across regulatory compliance, third-party privacy, and data

Qualifications

• 10+ years of professional privacy program experience, with 2LOD oversight.
• Experience with PIAs/PRAs, governance, risk management, and financial-services regulation.
• Ability to produce governance documents, risk assessments, metrics, reports, and remediation plans.

Responsibilities

• Mature the enterprise privacy governance framework and procedures.
• Oversee PIAs and PRAs including intake, review, tracking, escalation, and reporting.
• Support privacy risk management activities, RCSA, controls, and KRIs.
• Coordinate with Procurement, Legal, Compliance, Security, and business teams on privacy.
• Evaluate privacy risks in AI and apply Privacy-by-Design principles.
• Engage business units to improve privacy awareness and risk visibility.
• Translate regulatory requirements into practical policies and governance processes.
• Collaborate across Legal, Compliance, Security, Technology, and Data Management.

Skills

Privacy governance

PIAs/PRAs

Risk management

2LOD oversight

Regulatory compliance

AI privacy

Third-party privacy

Policy & controls

Executive reporting

Job description

Job Title: Senior Enterprise Privacy Governance and Risk Management Analyst
Location: Vienna, VA
Work Schedule: Hybrid, onsite 3 days a week
Pay Rate: Open to W2 and established 1099's (no c2c)
Position Type: Multiyear Contract

We are currently seeking a Senior Enterprise Privacy Governance and Risk-Management Analyst. Candidates must have at least 10 years of professional privacy program experience, 2LOD oversight, PIAs/PRAs, governance, risk management, financial-services regulation, third-party privacy, and emerging AI privacy risks.

Candidates must have at least 10 years of experience designing, implementing, and maturing enterprise privacy programs, ideally within a highly regulated financial institution and a Second Line of Defense (2LOD) environment. The contractor will focus on privacy governance, risk management, regulatory compliance, PIAs/PRAs, third-party privacy oversight, and AI privacy governance. The role requires someone who can operate strategically while also producing practical governance documents, risk assessments, metrics, reports, and remediation plans.

Key Responsibilities

• Mature and maintain the enterprise privacy governance framework, policies, standards, and procedures.
• Oversee Privacy Impact Assessments (PIAs) and Privacy Risk Assessments (PRAs), including intake, review, tracking, escalation, and reporting.
• Support privacy risk management, RCSA activities, control assessments, issue remediation, KRIs, and executive reporting.
• Conduct third-party privacy reviews and coordinate privacy requirements with Procurement, Legal, Compliance, Security, and business teams.
• Evaluate privacy risks associated with AI and advanced analytics and incorporate Privacy-by-Design principles.
• Partner with Business Units to improve privacy awareness, training, adoption, and risk visibility.
• Align privacy requirements with Data Governance, Data Sharing, Records Management, and AI Governance.
• Support regulatory, audit, and risk management responses.
• Translate regulatory requirements into practical policies, controls, and governance processes.
• Work across Legal, Compliance, Security, Technology, Data Management, and business stakeholders.

Job Description

Seeking a senior privacy professional with a minimum of 10 years of experience designing, implementing, and operationalizing enterprise privacy programs within financial institutions, preferably in the second line of defense. The contractor will support the maturation of the organization’s privacy framework, governance processes, privacy risk management capabilities, regulatory compliance obligations, third?party privacy oversight, Privacy Impact Assessment (PIA)/Privacy Risk Assessment (PRA) programs, and privacy reviews of Artificial Intelligence initiatives. He/she will be working closely with our partners in the first line of defense as well as in the Legal department to ensure comprehensive coverage for privacy requirements.

The ideal candidate has hands-on experience standing up or enhancing privacy programs in the second line of defense at highly regulated financial environments and can operate strategically while also delivering practical implementation artifacts.

Privacy Governance & Standards

• Support development, maintenance, and refresh of Privacy governance artifacts.
• Assist with alignment of Privacy requirements across Data Governance, Data Sharing, RIM, and AI governance initiatives.
• Track regulatory, audit, and risk management commitments impacting Privacy.

Privacy Impact Assessment (PIA) Oversight

• Support intake, coordination, tracking, and reporting of PIAs.
• Review submissions for completeness and adherence to established requirements.
• Escalate gaps and concerns for management review and challenge.

Privacy Risk Oversight

• Assist with Privacy-related RCSA and control oversight activities.
• Support risk identification, issue tracking, remediation monitoring, and reporting.
• Contribute to development of risk metrics, KRIs, and executive reporting.

Third-Party Privacy Reviews

• Support Privacy reviews associated with third-party relationships and external data usage.
• Coordinate with Procurement, Legal, Compliance, Security, and business stakeholders.
• Assist in documenting privacy risks and mitigation requirements.

AI & Privacy Integration

• Evaluate Privacy considerations associated with AI and advanced analytics use cases.
• Support Privacy-by-Design principles within AI governance activities.
• Identify intersections between Privacy, Data Sharing, Records Management, and AI risk.

Business Unit Engagement

• Provide guidance and coordination support for Business Unit Privacy activities.
• Support communication, awareness, training, and adoption efforts.
• Help aggregate enterprise-wide visibility into Privacy risks, issues, and activities.

Desired Knowledge and Skills

Foundational Knowledge

• Privacy principles and risk management concepts.
• Understanding of Personally Identifiable Information (PII) and sensitive data handling.
• Familiarity with Privacy-by-Design concepts.
• Understanding of records management and data sharing dependencies.

Governance & Risk Skills

• Second Line of Defense mindset and effective challenge.
• Governance document development and maintenance.
• Policy, standard, and procedure interpretation.
• Risk assessment and issue management experience.
• Audit and regulatory response support.

Analytical Skills

• Ability to identify trends and emerging risks.
• Executive reporting and presentation development.
• Data analysis and metric development.
• Process mapping and control evaluation.

Collaboration Skills

• Ability to coordinate across Legal, Compliance, Security, Technology, Data Management, and Business Units.
• Strong facilitation and stakeholder management capabilities.
• Ability to translate regulatory requirements into practical governance expectations.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.