Provide services as a Policy Analyst in support of the overall functions of the Office of the Director (OD) within the National Institutes of Health (NIH). Under this task order, the contractor will independently provide support services to satisfy the overall operational objectives of the Office of the Director, Office of Management Assessment. The primary objective is to provide services and deliverables through performance of qualitative and quantitative support services

Duties and Responsibilities:

• Develop and maintain content in the NIH OMA Privacy Teams and SharePoint sites; develop training material. 5
• Provide technical advice to staff regarding new policies and procedures.
• Develop guidebooks, templates and other tools to assist staff with policy practices.
• Interpret requirements, analyze gathered information, verify facts, draw conclusions and prepare work products Assist with development of on-line privacy-related awareness activities (e.g., virtual trainings).
• Support efforts to ensure NIH Privacy Program content is consistent with applicable HHS and NIH policy. 4
• Research and summarize background materials as needed by locating scientific or other policy related information on the internet and other means, including literature and database searches.
• Work with staff on reporting requirements, including collecting information, collaborating with other offices and preparing written reports.
• Review and promote privacy risk assessments (i.e., Privacy Threshold Analyses, Privacy Impact Assessments, Third Party Website Application PIAs and Internal PIAs) to the HHS Senior Agency Official for Privacy for approval. 1
• Compile and analyze policy and related information.
• Collect and analyze relevant qualitative and statistical information and program information. Analyze and evaluate data for policy information.
• Conduct and summarize technical research on policy topics. Collect, organize and analyze data from various sources.
• Compile, analyze and organize scientific, policy and related information.
• Collect, analyze and organize relevant qualitative and statistical information and program information. Research, analyze and evaluate data for policy information.
• Conduct and summarize technical research on policy topics. Collect, organize and analyze data from various sources.
• Electronically collect, analyze, and organize relevant qualitative and statistical information and Privacy Program information to prepare clear and effective reports. 2
• Prepare reports for upper management regarding status of current policy initiatives.
• Prepare background information, options and recommendations that are used to brief upper management.
• Provide privacy policy and compliance recommendations to NIH staff, when consulted, in accordance with the Privacy Act of 1974, E-Government Act of 2002, Federal Information Security Modernization Act (FISMA) of 2014, OMB Circular A- 130, OMB Circular A-108, OMB-17-12 and other applicable statutes, regulations, and policies. 3
• Attend meetings, workshops, and seminars on relevant topics; provide a summary of relevant proceedings.
• Interpret, analyze and condense material from a variety of sources for presentation.
• Prepare background materials and provide context on a range of policy and program issues for use by upper management.
• Prepare substantive technical reports and succinct executive summaries explaining program and policy issues. Perform fact finding and review to assist in developing and implementing organizational policies and practices. Provide expert advice on the administrative and management implications of policy and program proposals.
• Analyze and evaluate findings and recommend more efficient, effective and economical ways to accomplish policy objectives.
• Prepare reports for upper management regarding status of current policy initiatives.
• Prepare background information, options and recommendations that are used to brief upper management.
• Interpret, analyze and condense material from a variety of sources for presentation.
• Compile data and prepare graphs, slides and presentations.
• Prepare reports, graphs, etc., for use by upper management.
• Collect, analyze, and organize relevant qualitative and statistical information and Privacy Program information to prepare clear and effective reports
• Prepare recommendations and alternative options based on knowledge and analysis of policy practices and procedures.
• Attend meetings; provide minutes and reports. Review and implement discussion items.
• Participate in planning sessions; contribute expertise in discussions of current and new policy initiatives.
• Support NIH Privacy Program stakeholder meetings (e.g., Privacy Coordinator Group Meeting, Privacy Management Committee Meeting, Privacy Incident Response Team Meeting).
• Serve as NIH representative at HHS and/or NIH privacy meetings, as assigned.
• Prepare briefings, summaries, talking points and background documents; assemble briefing books.
• Prepare a variety of status reports, management summaries and briefing papers which identify problems, assess the overall condition of work completed or in progress, and outline issues, solutions, and recommendations.
• Upon request, the contractor will provide documentation or reasonable evidence of all work products - Ad-Hoc
• Work products and documents related to providing support to the NIH Privacy Program staff to help improve program areas, determine priorities, and handle and resolve emergency situations- Ad-Hoc
• Work products and documents related to providing communication and outreach; develop and maintain content in NIH OMA Privacy SharePoint and Teams sites; develop training material; develop guidebooks, templates and other tools for new PIA management practices - Monthly
• Work products and documents related to collecting, analyzing and organizing relevant qualitative and statistical information and program information; prepare reports and updates on project, including PowerPoint presentations and summary reports - Weekly
• Status and forecast report by content area - Weekly
• Presentations for PPB members - Ad-Hoc
• PowerPoint and MS Word document guidance on the Privacy Act, identifying PII and sensitive PII, completing a privacy risk assessment (e.g., Privacy Impact Assessment/Privacy Threshold Analysis - Ad-Hoc

Basic Qualifications:

• Bachelor’s degree in Multi/Interdisciplinary Studies.
• International Association of Privacy Professionals (IAPP) Certification.
• Related specialized experience in the Federal sector.
• 3 or more years of privacy related experience.
• Experience with Teams, Zoom, WebEx, Microsoft Office, Adobe Acrobat, SharePoint.
• Excellent analytical, organizational and time management skills.
• Knowledge of E-Government Act of 2002, Privacy Act of 1974, Federal Information Security Modernization Act (FISMA) of 2014, OMB Circular A-130, OMB Circular A-108, OMB-17-12.

Minimum Qualifications:

• Strong communications skills, both oral and written.
• Ability to multi-task and pay close attention to detail.
• Excellent analytical, organizational and time management skills.
• Strong communication skills, both oral and written.

• This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required by this position.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

GAP Solutions provides reasonable accommodations to qualified individuals with disabilities. If you need an accommodation to apply for a job us at recruiting@gapsi.com. You will need to reference the requisition number of the position in which you are interested. Your message will be routed to the appropriate recruiter who will assist you. Please note, this email address is only to be used for those individuals who need an accommodation to apply for a job. Emails for any other reason or those that do not include a requisition number will not be returned.