Aman E Email & Phone Number

I am a highly accomplished IAPP-certified privacy professional with a wealth of experience in the domains of information privacy, governance risk, and compliance. My expertise lies in harnessing industry-specific information security and control frameworks, encompassing a comprehensive range of standards such as the NIST Risk Management Framework, Security Management & Operations, Vulnerability Scanning, Certification, and Accreditation (A&A), as well as NIST 800-53rev4, NIST SP 800-37 rev 1, NIST 800-18, NIST800-34, NIST 800-60Vol1&2, NIST 800-30, NIST 800-137, FIPS 199/200, FISMA, NIST Family of Security Control, POA&M, PIAs, PTAs, SORNs, Incident and Contingency Planning, ISO 27001&2, (SOC1&2), PCI-DSS, HIPAA, HITRUST, GDPR, SOX, and FedRAMP. My track record showcases my in-depth understanding of US privacy laws and international regulations, including HIPAA, VHA Research and Development Policies, Handbook 1200, and VA 6500 Handbooks and Directives, along with my commitment to data security and governance.

• 

  Sr. Data Privacy Analyst

  1Tech Solutions

  Apr 2022 - Present - United States

  • Monitors Federal law, regulation, and policy for changes that affect the Privacy program. Guides in developing and establishing Privacy policies and procedures to ensure that significant privacy issues are identified and deficiencies are addressed.• Review proposed policies with a privacy component and recommend changes to impact management and program processes. Recommends adopting and applying new methods and approaches to ensure program or project requirements are aligned with strategic objectives.• Conducted Privacy Threat Assessment (PTA)to ensure new systems meet the system owner's Privacy, Compliance, and Regulatory requirements.• Drafts standard operating procedures, guidance, and handbooks for the Privacy team and other teams responsible for safeguarding personally identifiable information (PII).• Participates in audits of programmatic and system controls that are in place and ensures the Privacy program meets all industry and legal standards. Regularly review portfolio systems to ensure compliance with all relevant laws, policies, and best practices. Conducts required Privacy Continuous Monitoring (PCM).• Conducts the required System of Records Notice (SORN) reviews, including coordinating with system owners to ensure the privacy documentation appropriately reflects the needs of the operational unit. Conducts regular Privacy Impact Assessment (PIA) reviews.• Develops new metrics to measure the effectiveness of program initiatives approved by executive leadership. Assesses the efficiency and integrity of the Privacy programs and their execution. Assessments may also include impact analyses of program changes or proposals for new approaches for monitoring, managing, or evaluating critical programs.

• 

  University Of Maryland