Duties

The incumbent must be a skilled legal expert in federal privacy and information security laws. The incumbent provides legal expertise, guidance, and day-to-day administration of the Agency's privacy program. The incumbent is responsible for the agency's compliance with applicable privacy and information security laws and provides expert legal advice to the agency's General Counsel, Chief Information Officer, and other Bureaus and Offices in the agency on privacy and information security matters. The incumbent reports directly to the General Counsel or to his or her delegate.

The incumbent is the responsible official for the agency's privacy program-that is, the range of activities the agency undertakes to protect the personally identifiable information (PII) it collects and maintains in its systems, as well as the security of other information it maintains on its systems. The incumbent has a central policy-making role in the agency's development and evaluation of legislative, regulatory, and other policy proposals that have privacy implications. The incumbent also has a central role in overseeing, coordinating, and facilitating the agency's privacy compliance efforts. The incumbent also manages privacy risks associated with any agency activities that involve the creation, collection, use, processing, storage, maintenance, dissemination, disclosure, and disposal of PII by programs and information systems. The incumbent also works with other federal and state agencies to enter into computer matching agreements and for other purposes.

The incumbent is expected to closely follow developments in the rapidly changing fields of privacy and information security and ensure, to the greatest extent possible, that the agency follows current best practices in these fields. The incumbent also has a good working knowledge of and closely tracks developments in information technology, especially cloud computing, and can lead the agency's efforts to assess how these developments impact the privacy of individuals.

Requirements

Conditions of Employment

• US Citizenship.
• Bar Membership Required.
• Suitable for employment as determined by a background investigation.
• Must submit a financial disclosure statement upon assuming the position.
• Serve a probationary period of one year, if applicable.
• Males born after 12/31/59 must be registered with Selective Service

As required by Executive Order 14043 , Federal employees are required to be fully vaccinated against COVID-19 regardless of the employee's duty location or work arrangement (e.g., telework, remote work, etc.), subject to such exceptions as required by law. If selected, you will be required to be vaccinated against COVID-19 and submit documentation of proof of vaccination by November 22, 2021 or before appointment or onboarding with the agency, if after November 22. The agency will provide additional information regarding what information or documentation will be needed and how you can request of the agency a legally required exception from this requirement.

Qualifications

Applicants must provide detailed evidence of possession of each of the Mandatory Technical Qualifications (MTQs) listed below to assist reviewing officials in determining the best qualified candidates to be referred to the selecting official. FAILURE TO MEET OR ADDRESS ANY ONE OF THE MANDATORY TECHNICAL QUALIFICATIONS WILL ELIMINATE A CANDIDATE FROM FURTHER CONSIDERATION.

CANDIDATES MUST MEET BOTH THE EDUCATIONAL AND THE MANDATORY TECHNICAL QUALIFICATIONS IN ORDER TO BE DEEMED AS QUALIFIED FOR THIS POSITION.

A. Education

You must meet the minimum basic educational requirements for Attorney positions. Education requirements include: a professional law degree (JD, LL.B., and/or LL.M).

Transcripts verifying education must be submitted at the time of selection.

AND

B. Mandatory Technical Qualifications

The Mandatory Technical Qualifications (MTQs) for this position are (as listed in the Vacancy Questions):

Experience interpreting and implementing privacy and cybersecurity laws and regulations, including laws that specifically regulate the collection, use, storage, transfer, and disposal of PII and other sensitive information (e.g., the Privacy Act of 1974 and the Federal Information Security Management Act (FISMA)), as well as any general experience with privacy laws applicable in other contexts (e.g. the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Graham-Leach-Bliley Act (GLBA), and the General Data Protection Regulation (GDPR)); demonstrated experience applying privacy and cybersecurity laws and regulations to particular circumstances; demonstrated experience with privacy and information security compliance work.

Demonstrated experience ensuring the security of information systems, particularly those containing personally identifiable information (PII); demonstrated experience developing methods for preventing and responding to data breaches.

Demonstrated extensive experience preparing comprehensive legal documents and providing legal advice, drafting legal memoranda, analyzing complex legal problems, and conducting investigations; superior legal research, analytical, and writing skills.

Additional information

EEO Policy Statement

Reasonable Accommodation Policy Statement

Veterans Information

Legal and Regulatory Guidance