Privacy Subject Matter Expert And Analyst

Summary

Join Arlo Solutions as a Privacy Subject Matter Expert (SME) supporting the Chief Information Officer (CIO) within the Chief Digital and Artificial Intelligence Office (CDAO). This independent role focuses on integrating privacy frameworks into assessment and authorization processes, ensuring compliance with privacy, civil liberties, and security standards. You will define and operationalize Privacy Impact Assessments (PIAs), align privacy policies with federal and DoD requirements, and collaborate across DoD entities to address privacy challenges associated with AI initiatives. The position requires in-depth expertise in privacy law, risk management, and DoD security. Primarily remote work is offered, with occasional office visits required. Candidates in the Washington DC Metropolitan area are preferred.

Requirements

• Must have a current and active Secret or higher security clearance
• Master’s degree in a related field from an accredited university/college
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field
• Minimum 5 years of combined Joint, Interagency, OSD, or Service Headquarters experience performing work related to task area
• Minimum 5 years of experience using communication skills, both written and oral, to include preparation of written products for senior leader (general officer/flag officer/senior executive service level)
• Ability to communicate complex cybersecurity concepts to both technical and non-technical stakeholders, including senior leadership
• Must be comfortable in outward-facing roles, including presenting to senior leadership and participating in external vendor discussions

Responsibilities

• Develop and implement a robust Privacy Impact Assessment (PIA) framework tailored to the CDAO’s mission, integrating it into A&A processes and the broader cybersecurity structure
• Define privacy policies and procedures aligned with DoD requirements, ensuring compliance with federal privacy laws, such as the Privacy Act of 1974
• Collaborate with stakeholders to address privacy risks in AI and digital initiatives, ensuring alignment with civil liberties and ethical considerations
• Provide expert guidance on privacy controls (e.g., NIST SP 800-53) and their integration into the Risk Management Framework (RMF)
• Establish governance structures for the handling of sensitive data, promoting transparency and accountability
• Conduct privacy risk assessments and recommend mitigation strategies to enhance data protection
• Advise leadership on privacy implications of emerging technologies and recommend actionable strategies
• Collaborate with OVL teams to align privacy requirements with cybersecurity objectives
• Lead efforts to enhance privacy training and awareness within CDAO
• Monitor and analyze changes in privacy regulations, ensuring organizational practices remain compliant

Preferred Qualifications

• At least 5 years of experience in privacy / cyber operations
• Expertise in privacy frameworks, security apparatuses, and civil liberties
• Strong knowledge of DoD A&A processes, privacy controls (e.g., NIST SP 800-53), and data protection strategies
• Experience in policy development and the strategic implementation of cybersecurity operations, particularly within government or defense organizations
• Proficiency in cybersecurity frameworks such as NIST, MITRE ATT&CK, and ISO 27001 and DoD Instructions such as 5400.16

Benefits

Primarily remote work. Will be required to come into the office for specific meetings as requested