Privacy Compliance Auditor (SME)

About Us:

At RELI Group, our work is grounded in purpose. We partner with government agencies to solve complex challenges, improve public health, strengthen national security, and make government services more effective and efficient. Our team of over 500 professionals brings deep expertise and a shared commitment to delivering meaningful outcomes. Behind every solution is a group of experts who care deeply about impact—whether we’re supporting data-driven decisions, modernizing systems or safeguarding critical programs.

Position Summary:

RELI Group is seeking an experienced Privacy Compliance Auditor Subject Matter Expert (SME) to support privacy-focused audits and assessments under Task 8 of the Information Security and Privacy Services (ISPS), part of the Marketplace System Security and Privacy Support Services (MSSPSS) contract. The Privacy Compliance Auditor SME will provide expert-level evaluation of CMS ACA and NST systems to ensure compliance with the Privacy Act, HIPAA, OMB guidance, and CMS privacy policies. This role includes advising on privacy risk mitigation, assessing compliance documentation, conducting audit readiness reviews, and engaging with stakeholders to enhance privacy governance and transparency.

Responsibilities: 

• Conduct comprehensive privacy compliance audits of CMS systems, ensuring adherence to federal privacy laws and CMS privacy requirements
• Evaluate Privacy Impact Assessments (PIAs), System of Records Notices (SORNs), and Data Use Agreements (DUAs) for completeness and accuracy
• Support CMS in meeting audit requirements from OMB, OIG, OCR, and internal privacy oversight bodies
• Provide recommendations for privacy control improvements and develop audit remediation plans
• Monitor and document privacy risks, data handling processes, and potential noncompliance issues
• Collaborate with Privacy Officers, ISSOs, legal counsel, and system owners to ensure ongoing compliance and audit readiness
• Develop privacy audit checklists, frameworks, and compliance dashboards
• Author formal audit reports, briefing documents, and stakeholder communications

• Bachelor’s degree in Privacy, Cybersecurity, Law, Public Policy, or a related field.
• 7+ years of experience in privacy compliance auditing, privacy impact assessments, or data protection in a federal setting.
• Strong understanding of the Privacy Act, HIPAA, OMB Circular A-130, and FISMA privacy requirements.
• Experience conducting audits or assessments for CMS, HHS, or similar agencies.
• Exceptional written and verbal communication skills, with experience developing formal audit deliverables.
• Ability to translate complex privacy policies into actionable compliance and audit strategies.

Preferred Qualifications:

• Experience supporting ACA-related programs and systems.
• Certifications such as CIPP/G, CIPM, CHPC, or CISA.
• Familiarity with CMS privacy templates, requirements, and privacy governance structures.
• Understanding of privacy-enhancing technologies, Zero Trust, and secure data-sharing models.
• Experience advising CMS leadership or supporting responses to federal audits (e.g., OIG, GAO, OCR)

EEO Employer:

RELI Group is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

HUBZone:

We encourage all candidates who live in a HUBZone to apply.  You can check to see if your address is located in a HUBZone by accessing the SBA HUBZone Map.

The annual salary range for this position is $125,000.00 to $175,000.00. Actual compensation will depend on a range of factors, including but not limited to the individual’s skills, experience, qualifications, certifications, location, other business and organizational needs, and applicable employment laws. The estimate displayed represents the typical salary range for this position and is just one component of the total compensation package for employees. RELI Group provides a variety of additional benefits to its employees. For additional details on the benefits that RELI Group offers click here