Federal Privacy Assessor, CIPP/US Certified

Job not on LinkedIn

🔥 0 minutes ago

☕ Washington – Remote

☕ Washington – Remote

💵 $135k - $165k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Endictus Corp

WebsiteLinkedInAll Job Openings

11 - 50 employees

🎖️ Defense

📦 Logistics

🔒 Cybersecurity

Defense • Logistics • Cybersecurity

Endictus Corp is an 8(a) and EDWOSB Federal Government Contractor specializing in privacy management, cybersecurity, program management, systems engineering, and various IT services. With a focus on supporting the Department of Defense and other executive branch organizations, they provide comprehensive solutions in information security, data analysis, and consulting among other specialties. Their expertise extends into areas such as logistics, audit readiness, and the use of AI/ML technologies.

📋 Description

• Plan and execute an independent assessment of a federal agency privacy program • Develop and maintain the assessment plan, including scope, methodology, schedule, evidence requirements, and stakeholder engagement • Evaluate the design, implementation, and effectiveness of applicable privacy controls • Review privacy governance structures, policies, procedures, standards, and supporting artifacts • Assess alignment of documented privacy practices with federal requirements and agency procedures • Identify privacy risks, gaps, weaknesses, inconsistencies, and control deficiencies • Maintain evidence-based traceability between criteria, evidence, findings, risk ratings, and recommendations • Assess and map NIST SP 800-53 Rev. 5 privacy controls • Review PIAs, SORNs, Privacy Act Statements, data inventories, policies, procedures, control documentation, data-use and information-collection documentation, data flows, records retention, data sharing, data minimization, risk documentation, and POA&Ms • Assign Low, Moderate, and High risk ratings and evaluate operational and compliance significance • Develop prioritized remediation recommendations and support POA&M development or refinement • Conduct interviews and working sessions with Privacy Office personnel, system owners, security personnel, program stakeholders, and subject matter experts • Request, review, and validate evidence; resolve evidence gaps and clarify control implementation • Communicate preliminary observations and findings and support Government review and adjudication • Prepare draft and final privacy assessment reports with scope, methodology, findings, evidence, risk ratings, deficiencies, corrective actions, and remediation priorities • Develop and deliver executive-level briefings for senior leadership • Ensure assessment documentation and presentation materials comply with Section 508 accessibility requirements

🎯 Requirements

• Active Certified Information Privacy Professional/United States (CIPP/US) certification maintained through the International Association of Privacy Professionals (IAPP) • Minimum five years of experience conducting privacy assessments for federal agencies • Demonstrated experience evaluating federal privacy programs, privacy controls, and associated documentation • In-depth understanding of federal privacy legislation, directives, regulations, policies, and guidance • Demonstrated experience planning and executing privacy assessments from initial scoping through final findings and executive reporting • Minimum five years of experience utilizing NIST SP 800-53 Rev. 5 privacy-assessor knowledge and application • Experience reviewing federal Privacy Office documentation used to satisfy NIST SP 800-53 Rev. 5 privacy controls • Experience assessing privacy controls within a mid-sized federal agency or comparable Moderate security categorization environment • Ability to determine whether privacy controls are adequately documented, implemented, supported by objective evidence, and operating effectively • Experience mapping findings to specific NIST SP 800-53 Rev. 5 privacy controls • Experience developing or supporting POA&Ms and actionable remediation recommendations • Experience preparing formal privacy assessment reports and incorporating Government review comments • Experience developing and delivering executive-level briefings • Ability to communicate technical and regulatory privacy issues to technical stakeholders and executive leadership • Strong working knowledge of NIST SP 800-53 Rev. 5 privacy controls, federal privacy assessment methodologies, Privacy Act requirements, PIAs, SORNs, Privacy Act Statements, data inventories, privacy risk analysis, control testing, evidence evaluation, data minimization, records retention, information sharing, data-flow analysis, POA&M development, federal assessment reporting, and executive communication • Must be eligible to successfully complete a National Agency Check with Inquiries (NACI) • Must comply with Government requirements for handling sensitive, proprietary, Privacy Act, and Government information • Must maintain strict confidentiality • Active DoD Secret clearance preferred, but not required