Staff Attorney (Privacy)

Description:

About the role:
We are seeking an experienced Staff Attorney to provide privacy law support to the Office of General Counsel (OGC) at a federal retirement agency in Washington, DC. This role provides legal advice and counsel on matters pertaining to the Privacy Act, the E-Government Act of 2002, the Federal Information Security Management Act (FISMA), and related guidance issued by OMB, NIST, and DHS.

Agency: Federal Retirement Thrift Investment Board (FRTIB), Office of General Counsel

Location: FRTIB Offices, 77 K Street, NE, Suite 1000, Washington, DC 20002

Openings: 1 position

Compensation: Based on experience. Rikka also offers medical, vision, dental benefits and 401K (with 4% employer match).

Schedule: Full-time, Monday–Friday, 8:00 AM–5:00 PM Eastern Time

Term: Base year (December 2026–November 2027) plus four one-year option periods

Key Responsibilities:

• Provide general consulting services to the Privacy Office on all privacy-related laws and meet with Privacy Office staff and the COR within two weeks of task order award to become familiar with FRTIB's privacy program and ongoing initiatives.
• Provide advice and expertise regarding the Privacy Act, including reviewing and revising Privacy Act statements as necessary.
• Assist the Privacy Office in drafting relevant privacy policies and procedures.
• Work with the Privacy Office and FRTIB's Information Assurance Division (IAD) to develop and apply privacy controls for FRTIB systems pursuant to NIST SP 800-53, Appendix J.
• Review privacy threshold analyses (PTAs) and privacy impact assessments (PIAs) for FRTIB systems and provide comments/edits regarding legal sufficiency.
• Assist in reviewing and revising Agency-wide system of records notices (SORNs), Privacy Act regulations, and other relevant regulatory materials.
• Assist in developing training materials for Agency employees and contractor personnel on relevant privacy laws.
• Perform legal research and draft legal opinions on privacy-related laws, regulations, and guidance, including statutes, regulations, OMB Memoranda, and NIST guidance, as requested.
• Work with the Privacy Office to create a dedicated privacy resources page for FRTIB employees.
• Assist in revising web-based policies and reviewing third-party websites and applications for compliance with privacy requirements.
• Attend in-person meetings with Agency personnel and Privacy Council meetings, providing notes and relevant materials as requested.
• Keep the Privacy Office updated on changes to relevant privacy laws, guidance, and news.
• Assist with tracking remediation of audit findings, where applicable.

Minimum Qualifications:

• J.D. from an accredited U.S. law school and active bar admission in any state or the District of Columbia.
• Minimum one (1) year of experience with the Privacy Act, the E-Government Act of 2002, FISMA, and related amendments, statutes, and regulations.
• Demonstrated experience with guidance issued by federal privacy authorities such as OMB, NIST, and DHS.
• Excellent interpersonal, communication, and client counseling skills.
• Proficiency in Microsoft Office (Word, Excel, PowerPoint, Outlook, Teams).
• U.S. Citizenship and ability to obtain adjudication for the requisite federal background investigation.
• Important Information for All Applicants

Work Authorization:
All candidates must have valid, legal authorization to work in the US. For three years (not necessarily consecutive years) out of the last five years immediately prior to employment with Rikka, the employee must have: (i) resided in the U.S.; (ii) worked for the U.S. in a foreign country as either an employee or contractor in a federal civilian or military capacity; or, (iii) been a dependent of a federal civilian or military employee or contractor working for the U.S. in a foreign country.

Federal Background Investigation
All positions require the successful completion of a federal background investigation and credentialing process prior to starting work. The government reserves the right to suspend or withdraw access at any time.

Privacy Act
All applicants must safeguard confidential and personally identifiable information and use it only as authorized. Unauthorized disclosure may result in fines and/or criminal penalties.

NDA
Prior to commencing work, all personnel assigned to the contract will be required to sign a Non-Disclosure Agreement and the FRTIB Rules of Behavior.

AI Tools
Contractor employees may not input, upload, transmit, or otherwise provide any FRTIB data, case information, personally identifiable information, or other sensitive information to any artificial intelligence system. Candidates must perform all work using Government-furnished equipment and systems.

---