Data Governance & Policy Subject Matter Expert

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the subject matter expert in data governance and policy for a NIH project lasting around six months.

• Analyze source-data governance requirements and convert them into clear, actionable, and verifiable technical controls.

• Review consent conditions, data-use limitations, access prerequisites, and DUC/DUA agreements.

• Establish governance and privacy standards for assessing synthetic data and residual disclosure risks.

• Assess when further review or authorization may be required for specific usage or sharing scenarios.

• Spearhead the creation of a machine-readable Governance Metadata Model.

• Outline requirements and acceptance criteria for a prototype governed-access interface, including authorization, audit logging, and data egress controls.

• Detect ambiguous, conflicting, or incomplete requirements and document interpretations in collaboration with NIH stakeholders.

• Design governance overlays, policy edge cases, and adversarial test scenarios for a simulated dbGaP-like corpus.

• Work alongside technical personnel to evaluate memorization, re-identification, membership inference, differential privacy guarantees, privacy budgets, and privacy–utility trade-offs.

• Provide governance and privacy standards for controlled-access, model-to-data, and synthetic-data assessments.

• Offer guidance on NIH and federal standards for controlled-access genomic data within a secure environment.

• Lead the governance and privacy components of project deliverables, including the data specification, Verification and Disclosure-Risk & Leakage Report, final report, and transition package.

• Collaborate with NIH staff, Mind Moves technical teams, and partners to address governance inquiries and document decisions.

⛳️ Requirements

• Proven experience managing sensitive or controlled-access data, including interpreting consent conditions, data-use limitations, access requirements, authorization protocols, and data-sharing agreements.

• Established ability to convert policy, contractual, regulatory, and ethical requirements into actionable and testable technical specifications, permission models, governance metadata, and acceptance criteria.

• Knowledge of data privacy, confidentiality, re-identification risks, data linkage, secondary use, and legitimate research necessities.

• Experience in defining or assessing access-control frameworks, permission matrices, authorization workflows, audit requirements, and data-use controls.

• Capability to identify policy deficiencies, ambiguous requirements, conflicting obligations, and edge cases that necessitate additional review.

• Proficient in collaborating with data scientists, software engineers, security experts, and architects.

• Demonstrated analytical judgment and problem-solving skills to balance privacy, compliance, and scientific utility.

• Exceptional written and verbal communication abilities.

• Experience working with multidisciplinary teams and engaging policy owners, researchers, technical teams, and other stakeholders.

• A full background check will be required upon selection.

• Must be eligible for the contract within the US.

• Professional working proficiency in English in reading, writing, speaking, and listening.

• Willingness to accommodate client meetings during standard Eastern business hours, approximately 8:00 AM–6:00 PM EST.

• 5+ years of professional experience in data governance, privacy, compliance, or policy (additional experience is considered valuable).

🏝️ Benefits

• Approximately six-month contract duration.

• Part-time schedule of around 20 hours per week (totaling about 540 hours).

• Fully remote work environment.

• Immediate start date available.

• Opportunity to contribute to a mission-driven NIH project at the forefront of genomics, privacy, and AI.

• Chance to witness governance being encoded and enforced in a functioning system.

• Global impact through efforts to support responsible access to research data.