Business Analyst - Information Governance

Agile Decision Sciences LLC is looking for a Business Analyst - Information Governance to support a mature Federal Commission’s Controlled Unclassified Information (CUI) Management and Privacy Program. Work Location: DC. Hybrid - 2 days onsite/3 days remote Responsibilities The Business Analyst will work as part of a team to support the overall CUI program and Privacy specific activities to include: Controlled Unclassified Information (CUI) Facilitate collaboration with stakeholders across 12 program offices to improve compliance with CUI policies and standards, identify compliance challenges, and update and manage CUI training initiatives. Support the development and execution of the information governance strategic roadmap. Develop and deliver executive-level briefings for organizational leadership. Provide technical guidance and recommendations to advance program objectives. Develop and maintain mandatory training modules. Manage and maintain the catalog of document types. Privacy Develop, review, and maintain privacy policies and standard operating procedures in compliance with federal mandates, NIST guidance, FISMA requirements, and Commission policies. Review Privacy Threshold Assessments (PTAs) and develop Privacy Impact Assessments (PIAs) for applicable Commission systems. Support the development and review of System of Records Notices (SORNs). Respond to OMB data calls and other ad hoc information requests. Support the annual FISMA audit by preparing responses for the Senior Agency Official for Privacy within the DHS CyberScope application. Develop and maintain privacy training materials and internal privacy web content. Support privacy incident response activities, including drafting communications, agency responses, and notification letters. Assist with implementing new privacy and information security tools. For the qualifications, I'd also make them more consistent: Required Qualifications Bachelor’s degree or relevant work experience is required. 3+ years of experience in business analysis, compliance, information governance, or information security. Experience managing enterprise or sensitive data. Experience developing executive briefings, strategic recommendations, and implementation roadmaps. Experience with data governance, information governance, and policy development. Experience with CUI and/or privacy programs; policy writing experience preferred. Proficiency with Microsoft Office Suite. Excellent written and verbal communication skills with strong attention to detail. Preferred Qualifications Experience with Azure DevOps. Experience with Microsoft Purview. Experience with Zero Trust architecture or framework.