Privacy Lead

Job Description

Job Description

LRS Consulting Services is seeking a Privacy Lead who is passionate about privacy governance, regulatory compliance, and protecting sensitive information across complex federal environments. This hybrid direct-hire opportunity offers the chance to serve as the senior privacy authority for a federal agency, leading enterprise privacy initiatives, shaping privacy strategy, and ensuring compliance with federal privacy laws, regulations, and policies.

Location: Washington, DC (Hybrid - 1 day per week onsite)

• Serve as the senior subject matter expert and program lead for all privacy-related activities across the organization.
• Lead the development, implementation, and continuous improvement of the agency's privacy program, ensuring compliance with the Privacy Act of 1974, E-Government Act of 2002, OMB Circular A-130, and other applicable federal privacy requirements.
• Oversee the development and maintenance of Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), System of Records Notices (SORNs), privacy policies, program plans, and related documentation.
• Provide expert guidance on the identification, classification, protection, and management of Personally Identifiable Information (PII) and Sensitive PII (SPII).
• Lead privacy assessments for new and existing systems, applications, programs, and business processes, identifying privacy risks and recommending mitigation strategies.
• Partner with legal, cybersecurity, IT, and business stakeholders to embed Privacy by Design principles into technology initiatives, procurement activities, and operational processes.
• Integrate privacy controls and requirements into NIST Risk Management Framework (RMF) and Authorization to Operate (ATO) activities.
• Develop and deliver privacy awareness, training, and education programs for employees, contractors, and leadership teams.
• Conduct privacy compliance reviews, audits, and assessments, and oversee remediation efforts for identified risks and gaps.
• Lead privacy incident response activities, including PII breach investigations, reporting, notifications, and corrective actions.
• Monitor changes to federal privacy laws, regulations, executive orders, and OMB guidance, recommending and implementing required program changes.
• Maintain enterprise data inventories, data flow diagrams, and data mapping documentation related to PII and sensitive information.
• Develop privacy metrics, compliance dashboards, executive reports, and program performance measures.
• Serve as the primary liaison with oversight organizations including OMB, DOJ, GAO, OIG, and other federal partners.
• Provide privacy guidance related to cloud computing, artificial intelligence, data analytics, emerging technologies, and third-party data sharing activities.
• Support the development of data sharing agreements, computer matching agreeme