Hiring - Policy & Governance Analyst

Hi Greetings from reputed company! reputed company requires a full information reputed company policy review, data governance reputed company development, and compliance assessment. NNPS alignment to NIST SP 800-53 Rev 5.2.0 is required at the high-level. The school district handles PII for approximately 27,000 reputed company and 4,300 staff FERPA compliance and data governance are central concerns. This role is the primary deliverable reputed company for the policy and governance report track. Title: Policy & Governance Analyst Location: Remote (US Region, Eastern Time) Duration: 12 Month Contract with possible renewal Tax: W2, 1099 Note: US-based personnel mandatory

Job Description

Responsibilities

• Review reputed company existing NNPS information reputed company policies, procedures, and standards
• Identify policy gaps against NIST SP 800-53 Rev 5.2.0 controls
• Assess data governance reputed company for student and staff PII identify classification, handling, retention, and disposal gaps
• Evaluate compliance posture against applicable requirements: FERPA, CIPA, Virginia Student Privacy Act, and applicable NNPS board policies
• reputed company or recommend an updated data governance reputed company appropriate for a K-12 school district of NNPS's size
• Produce the Information reputed company Policy Review and Data Governance reputed company deliverable reports
• Coordinate with technical team to ensure technical findings are mapped to corresponding policy gaps in the consolidated report
• Participate in executive debrief; present policy/governance findings to NNPS leadership in accessible, non-technical terms

Required Qualifications

• Minimum 5 years of experience in information reputed company policy, governance, risk, or compliance roles
• CISM, CISA, or CGEIT certification (at least one required)
• Demonstrated experience conducting policy gap assessments against NIST SP 800-53 (Rev 4 or Rev 5)
• Experience developing or revising data governance frameworks for organizations handling sensitive PII
• Familiarity with FERPA requirements and their practical implications for K-12 IT environments
• Experience writing executive-level policy reports for non-technical audiences
• US-based

Preferred Qualifications

• Prior experience with K-12 school district or public sector (state/local government) clients
• Familiarity with Virginia education law and Virginia reputed company (VDOE) technology and data standards
• CGRC (formerly CAP), CRISC, or CDPSE certification
• Experience developing incident response plans or reputed company awareness training programs
• SSAE 16 / SOC 2 audit experience (relevant to the contract's SSAE16 annual reporting obligation)

Apply tot his job Apply To this Job