Acquisition Security & Privacy Analyst (Job 1456)

The role

The Acquisition Security & Privacy Analyst is responsible for privacy compliance, acquisition security reviews, governance, risk activities, and security authorization support. This person works with system owners, privacy officials, contract teams, cybersecurity personnel, and federal leadership to ensure technology procurements and operational systems comply with federal requirements.

What you will do

• Review IT acquisitions, software purchases, cloud services, and third-party technology solutions for security and privacy considerations
• Assist with tracking, documenting, and supporting remediation of privacy incidents involving PII and sensitive information
• Assist in evaluating security and privacy requirements for procurement packages
• Support identification of applicable security, privacy, and compliance clauses for acquisitions
• Coordinate with acquisition teams, CORs, ISSOs, and system owners to gather required security and privacy information and resolve compliance issues
• Support process improvement initiatives and maintenance of standard operating procedures

Required qualifications

• Minimum of three (3) years of experience reviewing and assessing IT acquisitions, cloud services, SaaS offerings, AI-enabled technologies, and software procurements for security, privacy, records mana
• Experience supporting compliance with the Privacy Act, E-Government Act, HIPAA, and HHS privacy requirements
• Prior experience developing and maintaining Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), System of Record Notices (SORNs), Privacy Act Statements, and Privacy Notices and rela
• Familiarity with NIST 800-53, FISMA, Privacy Act requirements, and federal compliance frameworks
• Experience supporting privacy incident response and/or vendor risk assessments
• Bachelor’s degree in information technology, Cybersecurity, or a related field
• Relevant certifications (e.g., CIPP/US, CIPM, CompTIA Security+, OneTrust Privacy Management Professional) required
• Excellent problem-solving and analytical skills
• Strong cross-team collaboration and coordination across diverse audiences and stakeholders

Nice to have

• Familiarity with FedRAMP and cloud security concepts
• Experience with ServiceNow, Jira, Confluence, Microsoft 365, and compliance tracking tools

Benefits

• Personal Time Off (PTO)
• medical
• dental
• vision
• supplemental life with AD&D
• disability coverage
• flexible spending accounts
• 401(k) Retirement Plan with a matching component
• training
• access to e-learning suite
• professional and technical certification preparation
• education assistance at accredited institutions

Before you apply

• Must be able to obtain a Public Trust clearance

About the company

DLH delivers improved health and national security readiness solutions for federal programs through science, research and development, systems engineering and integration, and digital transformation. The company brings a unique combination of government sector experience, proven methodology, and unwavering commitment to innovation.