Position Summary
The Cybersecurity Analyst (Privacy & Training) reports to the Oversight & Compliance Lead and supports the development, implementation, and continuous improvement of program.
The analyst evaluates systems, programs, technologies, and business processes for privacy risks and compliance requirements and provides guidance to protect Personally Identifiable Information (PII).
The position works with system owners, cybersecurity personnel, program managers, and privacy leadership to conduct Privacy Threshold Assessments (PTAs), Privacy Impact Assessments (PIAs), Systems of Records Notices (SORNs), and related privacy reviews and documentation.
The analyst maintains and tracks Interconnection Security Agreements (ISAs), security Memoranda of Understanding (MOUs), and the Information Security Systems Inventory (ISSI).
The Cybersecurity Analyst (Privacy & Training) also supports the development, distribution, and tracking of federally mandated cybersecurity and privacy training presentations for employees and contractors.
Compensation & Benefits
Starting Salary Range for Cybersecurity Analyst - Privacy & Training: $115,000 - $117,000
When considering your next opportunity, compensation is only part of the picture. We offer a benefits package designed to invest in your future and support your life outside of work.
Highlights include
- Up to a 6% 401(k) company match to help you build long-term financial security
- Paid time off as part of our comprehensive benefits package, so you have the flexibility to rest, recharge, and enjoy what matters most
- Medical, dental, and vision insurance, plus prescription drug coverage
- Basic life and AD&D insurance, with supplemental life options
- Short-term and long-term disability coverage
- Paid holidays
- Employee Assistance Program (EAP)
- Flexible Spending Account (FSA) and Health Savings Account (HSA) options
- Professional development, training, and certification support
- Voluntary benefits including accident, critical illness, and identity theft protection
Essential Functions, Duties & Responsibilities
- Coordinates with the A&A Team to develop PTAs and PIAs, identify privacy risks, and develop mitigation recommendations.
- Develop, review, and maintain PIAs, SORNs, ISAs, MOUs, inventories and supporting documentation.
- Advise system owners on privacy requirements and ensure privacy is incorporated throughout the secure Software Development Lifecycle (SDLC).
- Works with the A&A Team to evaluate new technologies, systems, programs, contracts, and online activities for privacy impacts.
- Monitor applicable federal privacy laws, regulations, policies, and guidance, including the Privacy Act, E-Government Act, and FISMA privacy requirements.
- Support privacy compliance reviews and identify gaps requiring corrective action.
- Support integration of privacy and cybersecurity requirements for systems and services processing PII.
- Works with the Policy Team to develop privacy policies, procedures, processes, templates, and program improvement recommendations.
- Develop privacy metrics and documentation supporting FISMA privacy reporting.
- Prepare privacy briefings, reports, status updates, and recommendations for government stakeholders.
- Research emerging privacy practices, regulations, technologies, and industry best practices.
- Maintain assessment schedules, action items, and audit-ready privacy documentation.
- Support process improvement and automation of privacy workflows.
- Performs administrative tasks for the Oversight & Compliance Team, maintaining various trackers and supporting other members as needed.
- Perform other job-related duties as assigned.
Supervisory Responsibilities: No supervisory/management authority
Basic Qualifications
- Bachelor's degree or equivalent professional experience in cybersecurity, privacy, information technology, information assurance, or related field.
- 3-5+ years of experience in cybersecurity, privacy, GRC, compliance, risk management, or related work.
- Experience with privacy assessments, risk assessments, compliance reviews, or similar analytical activities.
- Working knowledge of federal privacy requirements and PII protection.
- Ability to manage multiple assignments and meet deadlines in a federal contracting environment.
- Ability to obtain and maintain required federal credentials.
Preferred Qualifications
- CIPP/G or comparable privacy certification.
- Security+, CAP, CISSP, CISM, or CRISC.
- Federal Privacy Program experience.
- Experience with PTAs, PIAs, SORNs, FISMA privacy reporting, and NIST privacy/cybersecurity guidance.
- Experience integrating privacy into the SDLC.
- Experience assessing cloud, SaaS, external services, or emerging technologies.
- Experience with ServiceNow, Jira, Confluence, SharePoint, CSAM/JCAM, Archer, or similar GRC/workflow platforms.
Work Environment: Work is performed primarily in a climate-controlled environment.
Company Information
Behind every government mission stands skilled, mission-driven talent: people whose expertise and dedication turn complex challenges into successful outcomes.
Criterion Systems, part of Cherokee Federal, the federal contracting division of Cherokee Nation Businesses, is that team.
We modernize aging systems, deliver care where it's needed most, and keep missions supplied, staffed, and moving across defense, intelligence, and civilian agencies.
For more than 60 federal clients, we take on the work others won't, and deliver where it counts. If that's the kind of work you're looking for, you've found your team.