Privacy Analyst

Looking to take the next step in your career?

Discover why NCDIT is the ideal destination for your professional growth - Why Work for NCDIT

We currently have an opening for a Privacy Analyst

This position is designated Statutory Exempt and is exempt from the State Human Resources Act

The Privacy Analyst will be responsible for conducting privacy risk assessments; monitoring and ensuring privacy standards; and supporting the maturation of the program, processes and controls needed to safeguard the personal information/personally identifiable information (PII) and other sensitive data entrusted to the State. This responsibility includes performing privacy and AI risk assessments, reviewing privacy compliance and risk assessment documents in a timely manner, providing privacy operational advice regarding the risks, protection, and handling of PII and other sensitive information protected by state and federal privacy laws, regulations, policies, and frameworks (NIST – privacy, cybersecurity, risk management, data and AI frameworks).

Duties include, but are not limited, to:

• Conduct Privacy Threshold Analyses (PTAs) and Privacy Impact Assessments (PIAs) for new projects, systems, and third-party services to identify potential privacy risks and develop mitigation strategies.
• Collaborate with project teams to incorporate privacy by design (PbD) into all enterprise IT systems and processes.
• Evaluate third-party vendors and contractors for privacy, data protection, and AI ethical and risk compliance as part of NCDIT’s procurement and contracting processes.
• Identify potential privacy, data protection, and AI risks across state agencies’ projects, programs, and services, provide written recommendations and appropriate mitigation strategies.
• Work with the enterprise security and IT security teams to ensure that enterprise systems are designed and maintained with appropriate privacy and data protection controls.
• Conduct regular audits and assessments to ensure compliance with privacy processes, documentation, policies and regulatory requirements.
• Collaborate with the cybersecurity team to investigate, document, and respond to potential data breaches involving PII or privacy incidents.
• Documents privacy metrics.

About the Organization

TheN.C. Department of Information Technology (NCDIT) serves as the Technology Center for the State of NC. Services that NCDIT provides reach a client base of state and local government agencies, as well as schools, colleges and universities. NCDIT’s mission is to enable trusted business-driven solutions that meet the needs of North Carolinians. NCDIT provides technology services to state agencies and is charged with closing the digital divide by expanding availability of broadband services and promoting the adoption of affordable, high-speed internet.

As NCDIT’s services reach North Carolina residents from all backgrounds, we believe that a diverse workforce is our most valuable asset to recognize, understand and meet the IT needs of our constituents across the state. Our agency culture intentionally values diversity, equity and inclusion through the implementation of thoughtful, practical, innovative and data-driven strategies. We are an Employment First state, ensuring that people with disabilities have equal opportunities to succeed in the state government workplace (Executive Order 92). NCDIT supports recent executive orders to address pay equity for women (Executive Order 93), establish paid parental leave for birth, adoption, and foster care (Executive Order 95), and implement fair chance policies (Executive Order 158). Join a team that welcomes, values, respects and supports all members of our work community.

If you have student loans, becoming a state employee includes eligibility for the Public Service Loan Forgiveness Program. Visit www.studentaid.gov to learn more.

Salary

• $81,500 - $122,250/year

Qualifications

Knowledge, Skills and Abilities / Competencies

Resumes/CVs are intended to be used as a complement to an application. Generally resumes/CVs are lacking the detail and breadth of an applicant’s full education and work history so applicants should complete the application with more detail than what their resume contains to show that they meet both the Education Requirements and ALL Knowledge, Skills and Abilities (KSAs) listed below in order to qualify. Click these links for additional information: Introduction to the Job Application and Addressing Knowledge, Skills and Abilities. (Note: These links refer to Dept. of Public Safety process; this process is the same for Dept. of Information Technology.)

To qualify for this position, applicants must document on the application that they possess ALL of the following:

• Demonstrated knowledge of state and federal privacy and data protection laws and/or core concepts
• Demonstrated knowledge of AI governance concepts and/or issues related to data privacy and protection
• Demonstrated experience writing and reviewing privacy impact assessments and/or privacy threshold analyses
• Demonstrated experience performing gap assessments and/or setting or implementing strategic initiatives

The following Management Preferences are not required, but applicants that possess these skills are preferred:

• IAPP Certifications (CIPM, AIGP, CIPT or CIPP/US preferred)

This position will have access to data within the Division of Criminal Information Network (DCIN); and as such, NC Administrative Code 14B NCAC 18A.0401 mandates that prior to receiving and/or maintaining certification as a DCIN user, applicants:

• Shall agree to a fingerprint-based background search.

Minimum Education and Experience Requirements

Bachelor’s degree in computer science or a related IT field or related degree from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area;
or
Associate degree in computer science or a related IT field or related degree from an appropriately accredited institution and three years of progressive experience in IT Security or closely related area;
or
an equivalent combination of education and experience.

Other Information

333 Fayetteville St

Raleigh, North Carolina, 27603

How to Apply

The North Carolina Department of Information Technology (DIT) is an Equal Opportunity Employer who embraces an Employment First philosophy which consists of complying with all federal laws, state laws and Executive Orders. NCDIT uses the Merit-Based Recruitment and Selection Plan to fill posted positions. Hiring salary will be based on relevant qualifications, internal equity, and budgetary considerations pertinent to the advertised position.

• The Department of Information Technology will not accept "See Resume" or inserted text resumes in lieu of all work experience and education completed on the application.
• Employment at NCDIT is contingent upon a satisfactory background check.
• Applicants seeking Veteran's Preference must attach a DD form 214, Certificate of Release or Discharge from Active Duty, along with your application.
• Applicants seeking National Guard Preference must attach a NGB 23A (RPAS) if you are a current member of the NC National Guard in good standing. If you are a former member of the NC National Guard who served for at least 6 years and was discharged under honorable conditions, you must attach either a DD256 or NGB 22.
• Applicants applying for positions that require specific coursework, must upload and attach a copy of the transcript with their application.
• Applicants with relevant professional certifications to the posted job must attach proof of active certification along with the information in the “Certificates and Licenses” section.
• If applicants earned college credit hours but did not complete a degree program, they must attach an official transcript to each application to receive credit for this education.
• If applicants earned a foreign degree, foreign degrees require an official evaluation for U.S. equivalency and must be submitted to Human Resources for verification. There are several organizations that perform this specialized service, feel free to use any service of your choosing. The National Association of Credential Evaluation Services (NACES) has several options on their website that can provide credential verification: https://www.naces.org/members

REMOTE WORK:

We trust our employees to be self-motivated and successful in hybrid/remote roles, thus NCDIT offers robust work from home options and variable work schedule flexibility.

COMPENSATION & BENEFITS:

The state of North Carolina offers excellent comprehensive benefits. Employees can participate in health insurance options, standard and supplemental retirement plans, and the NCFlex program (numerous high-quality, low-cost benefits on a pre-tax basis). Employees also receive paid vacation, sick, and community service leave. In addition, paid parental leave is available to eligible employees.

Some highlights include:

• The best funded pension plan/retirement system in the nation according to Moody’s Investor’s Service
• Twelve (12) holidays/year
• Fourteen (14) vacation days/year which increase as length of service increases and accumulate year-to-year
• Twelve (12) sick days/year which are cumulative indefinitely
• Longevity pay lump sum payout yearly based on length of service
• 401K, 457, and 403(b) plans

Learn more about employee perks/benefits:

• Why Work For NC?
• NC OSHR: Benefits
• NC OSHR: Total Compensation Calculator

To apply for this position, please click the "Apply" link above (on the Government Jobs website) or visit https://www.governmentjobs.com/Applications/Index/northcarolina to complete an on-line application.

Due to the volume of applications received, we are unable to provide information regarding the status of your application over the phone. To check the status of your application, please log in to your account and click "Application Status." If you are selected for an interview, you will be contacted by management. If you are no longer under consideration, you will receive an email notification. If there are any questions about this posting other than your application status, please contact:

NCDIT Human Resources

Tajia Brown

Tajia.Brown@nc.gov

For technical issues with your application, please call the GovernmentJobs.com Applicant Support Help Line at 855-524-5627.

Benefits

NOTE: For temporary, contract or other supplemental staffing appointments: There are no paid leave, retirement or other benefits associated with these appointment types.

For permanent and time-limited appointments:
Eligible employees have benefits that include employee health insurance options, standard and supplemental retirement plans, NC Flex (a variety of high-quality, low-cost benefits on a pre-tax basis), and paid vacation, sick, and community service leave, to name a few. Paid parental leave is available for eligible employees. Some benefits require 30 + hours work/week for participation.