Privacy Analyst

ABOUT THE ROLE

TekStripes is hiring an RMF Analyst to lead a privacy or Risk Management Framework (RMF) workstream provider Directory program. As a workstream leader you will define the detailed approach for meeting workstream objectives, execute privacy and security control activities efficiently, and bring significant cross-industry depth to complex regulatory issues.

You will serve as a knowledgeable point of contact for privacy law and RMF practice, working fluently across the many laws and regulations that govern federal health information.

WHAT YOU WILL DO

• Lead a privacy or RMF workstream end to end, developing the approach and plan to meet its objectives.
• Execute RMF activities across the categorize, select, implement, assess, authorize, and monitor steps, with supporting documentation.
• Analyze privacy and security requirements across applicable laws and regulations and translate them into actionable controls.
• Identify, document, and help remediate privacy and security risks, and support Authorization to Operate activities.
• Develop and maintain privacy artifacts such as Privacy Impact Assessments, control narratives, and Plans of Action and Milestones.
• Advise project teams on nuanced privacy issues and regulatory interpretation.
• Coordinate with security, legal, and program stakeholders to keep the workstream on track.

WHAT YOU WILL BRING

• Bachelor's degree and 5 years of privacy, risk, or RMF experience.
• Demonstrated ability to lead a workstream and define the approach to meet its objectives.
• Working knowledge of major privacy laws and regulations and their practical, nuanced application.
• Experience executing RMF and privacy control activities across multiple environments and industries.
• Strong documentation, analysis, and stakeholder communication skills.
• S. Citizen or (no sponsorship); able to obtain a Public Trust if the contract requires it.

NICE TO HAVE

• Federal RMF and NIST SP 800-53 experience, including Authorization to Operate.
• Healthcare privacy experience, including HIPAA, and VA or VHA familiarity.
• Relevant certification such as CIPP, CIPM, or CISSP.
• Prior experience supporting a Provider Directory or comparable healthcare data environment.