Policy Analyst (Privacy Resource Center Support) (53223)

Position Objective: The Policy Analyst will provide centralized privacy support services for the Office of the Director (OD) across the National Institutes of Health.

The Policy Analyst support includes integration of privacy into system lifecycles, review and approval of privacy documentation, support for authorization activities, privacy risk assessments, breach response coordination, and development and implementation of privacy policies, training, and guidance. Responsibilities include Privacy Impact Assessments, supporting System of Records Notices, compliance with federal privacy laws and policies, and assisting with privacy requirements throughout the information technology procurement lifecycle.

Duties and Responsibilities:

• Analyze and evaluate findings and recommend more efficient, effective and economical ways to accomplish policy objectives. 3
• Interpret requirements, analyze gathered information, verify facts, draw conclusions and prepare work products
• Work with staff on reporting requirements, including collecting information, collaborating with other offices and preparing written reports.
• Analyze and evaluate data for policy information.
• Research, analyze and evaluate data for policy information. 1
• Prepare background information, options and recommendations that are used to brief upper management.
• Attend meetings, workshops, and seminars on relevant topics; provide a summary of relevant proceedings.
• Compile data and prepare graphs, slides and presentations.
• Perform fact finding and review to assist in developing and implementing organizational policies and practices.
• Prepare background information, options and recommendations that are used to brief upper management.
• Interpret, analyze and condense material from a variety of sources for presentation.
• Prepare recommendations and alternative options based on knowledge and analysis of policy practices and procedures.
• Attend meetings, workshops, and seminars on relevant topics; provide a summary of relevant proceedings.
• Prepare a variety of status reports, management summaries and briefing papers which identify problems, assess the overall condition of work completed or in progress, and outline issues, solutions and recommendations. 2
• Provide privacy compliance support services, privacy risk assessments, Privacy Impact Assessments, System of Records Notices, breach response coordination, policy and guidance development, training materials, and reporting outputs necessary to support enterprise-wide privacy program operations.