Security and Privacy SME

Position Details:

Job Title:

Security and Privacy SME

Job Type: Full-time

Location:

Falls Church, VA area (hybrid/remote with periodic on-site collaboration required)

Dynanet Corporation Overview:

Dynanet started with a focus on IT infrastructure and operations, helping organizations enhance their networks and overcome the limitations of 1990s technology. From strengthening communication channels to introducing innovative ways to collaborate and share information, Dynanet played a crucial role in shaping the early stages of digital transformation. The company’s efforts helped organizations build the very fabric of connectivity that now powers our modern world.

Over the last three decades, Dynanet has grown into a trusted partner for organizations looking to innovate boldly and transform seamlessly. While technology continues to evolve and unlock new opportunities, for nearly 30 years, Dynanet remains committed to delivering cutting-edge solutions that drive lasting change for its customers. Through agility, foresight, and an unwavering dedication to excellence, Dynanet continues to empower organizations to thrive in a rapidly changing digital landscape.

Our story is more than just a story of technology – it’s a story of vision, growth, and transformation that has shaped the past and continues to pave the way for the future.

About the Role:

The Security and Privacy SME will serve as the guardrail authority responsible for sensitivity classification validation, privacy controls implementation, and governance guardrails establishment across Federal healthcare data governance initiatives. This role ensures all data management activities comply with Federal security requirements, healthcare privacy regulations, and organizational policies while maintaining secure data handling throughout enterprise catalog operations.

Roles & Responsibilities:

• Validate sensitivity classification for data systems applying Controlled Unclassified Information (CUI), Protected Health Information (PHI), and Personally Identifiable Information (PII) classifications during metadata inventory activities
• Implement and enforce privacy controls ensuring compliance with Health Insurance Portability and Accountability Act (HIPAA), Federal privacy regulations, and organizational security policies
• Establish governance guardrails including role-based access controls (RBAC), data handling procedures, and security validation checkpoints for enterprise data catalog operations
• Design and validate security architectures for interim centralized repositories ensuring encryption at rest and in transit, audit logging, and authorized access controls
• Conduct security assessments for federated catalog integration including metadata exchange security, authentication protocols, and data protection mechanisms
• Develop and implement automated compliance monitoring including security control validation, privacy impact assessments, and regulatory compliance reporting
• Oversee security aspects of automated metadata harvesting ensuring secure extraction methods and protection of sensitive information during processing
• Validate Artificial Intelligence (AI) tool usage compliance ensuring approved tools are used within authorized environments with appropriate data handling controls
• Support User Acceptance Testing (UAT) security validation ensuring test scenarios maintain appropriate security controls and data protection measures
• Create security documentation including technical security controls, privacy procedures, and compliance validation processes

Required Professional Skills:

• 8+ years of experience in cybersecurity and/or technical data privacy
• 5+ years of experience safeguarding PII, PHI, and/or classified information at the technical level
• Deep understanding of relevant DoD regulations and policies regarding the technical safeguarding of PII, PHI, and/or classified information
• Experience working with NIST 800-53 and/or NIST 800-122 guidelines
• Ability to translate technical knowledge into strategic recommendations
• Keen attention to detail, especially in relation to technical policies and procedures
• Knowledge of healthcare privacy regulations and Federal data…