Cybersecurity Privacy Analyst

Koniag Data Solutions (KDS), a Koniag Government Services (KGS) company, is seeking a Cybersecurity Privacy Analyst to support our privacy program and ensure compliance with federal regulations, standards, and best practices. This role will work closely with the Assistant Privacy Officer to maintain privacy documentation, analyze compliance gaps, and implement privacy controls across the organization. The ideal candidate will have strong analytical skills, experience with privacy regulations, and the ability to collaborate across teams to ensure the protection of personally identifiable information (PII) and controlled unclassified information (CUI). This position offers a competitive compensation package, comprehensive benefits, and opportunities for professional growth.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Essential Functions, Responsibilities & Duties may include, but are not limited to:
The Cybersecurity Privacy Analyst will be responsible for maintaining and enhancing the organization's privacy program. Principal responsibilities include:
• Review and update privacy documentation as required including but not limited to Privacy Impact Assessments (PIA), Privacy Threshold Assessments (PTA), System of Records Notices (SORNs), and Security Impact Assessments (SIA) in support of the Assistant Privacy Officer
• Perform analysis of current privacy posture to determine compliance gaps with federal and departmental requirements, regulations, laws, standards, and best practices
• Review and update privacy policies and procedures as requested; maintain an inventory of policies and procedures needed to support the Privacy Program
• Analyze, document, and maintain agreements to share data for all appropriate information systems
• Assist with developing the Privacy Information Map (PIM) that identifies PII and CUI processed or stored in IT applications and databases to ensure such holdings are accurate, relevant, timely, and complete
• Implement a process to review for Privacy Information in all applications to validate that database data flow diagrams, schemas, and design documents are up to date
• Review and maintain PII incident handling procedures and assist in investigating PII incidents
• Maintain agency-wide Data Protection Policy
• Review and update Privacy Baseline Requirements for all information systems that include program and project level privacy controls
• Review and analyze Artificial Intelligence use cases to identify privacy risks
• Provide privacy-related training to employees on data protection policies and best practices

Requirements:
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Law, or related field
• 3+ years of experience in privacy, cybersecurity, or compliance roles
• Experience with federal privacy regulations, including the Privacy Act, FISMA, and related NIST standards
• Knowledge of privacy impact assessment processes and privacy control implementations
• Experience with documentation review and policy development
• In-depth knowledge of privacy laws, regulations, and frameworks applicable to federal agencies
• Experience with privacy documentation including PIAs, PTAs, SIAs, and SORNs
• Strong analytical skills with the ability to identify compliance gaps and recommend remediation actions
• Proficiency in evaluating systems and applications for privacy risks and implementing appropriate controls
• Experience in data mapping and data flow documentation
• Knowledge of incident response procedures related to PII breaches
• Excellent written and verbal communication skills
• Ability to translate complex technical and regulatory requirements into actionable policies and procedures
• Experience providing privacy awareness training to diverse audiences
• Strong attention to detail and organizational skills
• Ability to work independently and prioritize tasks effectively
Desired Skills and Competencies:
• Professional certifications such as CIPP/G, CIPM, CISSP, or equivalent
• Experience working in federal government agencies
• Knowledge of the NIST Privacy Framework and NIST SP 800-53 privacy controls
• Experience with the Federal Risk and Authorization Management Program (FedRAMP)
• Knowledge of artificial intelligence and machine learning privacy implications
• Experience with privacy automation tools or governance, risk, and compliance (GRC) platforms
• Understanding of cloud security and privacy considerations
• Experience with privacy-by-design methodologies
• Knowledge of control