Tracy Afram
Frederick
Summary
Insightful Senior Consultant known for high productivity and efficient task completion. Possess specialized skills in strategic planning, process optimization, and risk management. Excel in problem-solving, leadership, and communication, ensuring successful project outcomes. Bring valuable perspective to team dynamics and client relations, fostering collaboration and driving progress.
Highly enthusiastic and results driven information privacy professional with extensive background in integrating the knowledge and skills of the privacy profession into competent practice. Experience in engaging stakeholders in providing specialized privacy support services to ensure information is protected throughout its lifecycle as required by federal laws and policies. This includes providing comprehensive privacy analysis, compliance reviews, data breach management, reporting and associated documentation. Strong written and oral communication skills to support clients, stakeholders, and peers. Dedicated to maintaining a reputation built on quality, service, and uncompromising ethics.
Overview
12
12
years of professional experience
Work History
Privacy Analyst/Senior Consultant
Savan Group
02.2021 - 09.2025
- Evaluated the Privacy Program’s implementation of the relevant provisions governing the federal privacy laws and regulations including FISMA, NIST, Privacy Act of 1974, as amended, the E-Government Act of 2002, and Office of Management and Budget (OMB) memorandum (M-17-12), Fair Information Practice Principles (FIPPs) and circulars.
- Prepared, reviewed, and updated privacy compliance documentation in coordination with program officials for review and approval by the FEMA Privacy Branch and ultimately the Department of Homeland Security Privacy Office.
- Developed and revised the following privacy artifacts: Privacy Threshold Assessment (PTAs), Systems of Records Notices (SORNs), and Information Sharing Access Agreements (ISAA).
- Served as a subject matter expertise in conducting comprehensive Privacy Impact Assessments (PIAs) reviews (from the start to the end), analyzing, and working with the legal team.
- Reviewed and responded to Privacy Act Amendment requests by serving as a liaison between the requestor and the appropriate agency program office in order to maintain the data integrity of records in accordance with the Privacy Act of 1974 and other applicable laws.
- Lead the policy and privacy team to review and assessed the impact of Executive Orders (EOs) on the ability to implement federal privacy laws and policies; to incorporate privacy requirements into operational functions; and to execute existing privacy directives.
- Prepare, review and process precourrement documents include: Appendix G Checklist, Statement of Work (SOW), Statement of Objectives (SOO), or Performance Work Statement (PWS)
- Prepared, reviewed and processed precourrement documents include ITARS/ Appendix G Checklist, Statement of Work (SOW), Statement of Objectives (SOO), or Performance Work Statement (PWS).
- Lead the team through effective communication skills to collaborate with stakeholders within the agency with privacy monitoring and compliance for IA governance systems and activities.
- Assisted the Records Management Office in organizing their SharePoint inventory.
- Processed Incident or Breach (i.e., investigate, escalate, remediate, and close) privacy incidents reported to the Privacy Office. This includes assessing the risk of harm, mitigate privacy risks; errors, inefficiencies, and/or threats; and notifying impacted individuals expeditiously as practicable, without unreasonable delay.
- Drafted the first Incident Response plan and Standard Operating Procedure (SOP) for the FEMA Privacy Office, and completed a 100+ incident backlog within 2 months.
Privacy and Data Compliance Officer
Centers for Behavioral Health, LLC
Gaithersburg
04.2018 - 12.2020
- Reviewed and assessed the center’s privacy operating standards and procedures to introduce new procedural documentation, or suggest improvements, updates, and/or corrective actions for compliance.
- Developed privacy training modules and conducted trainings that introduced basic privacy concepts during scheduled new-hire training sessions.
- Performed periodic internal reviews of patient consent forms, privacy notices, and privacy policies to ensure compliance with applicable privacy regulations.
- Ensured the confidentiality, quality, and integrity of patient information collected via the Hotline and outreach programs, and that the collection complied with applicable laws, including patient consent requirements as stipulated in HIPAA.
- Investigated privacy incidents and complaints, including developing mitigation strategies and enforcing sanctions as required.
- Conducted privacy compliance gap analyses of program areas and systems and delivered a summary report of compliance and non-compliance areas and risks.
Intern, Partial Hospitalization Program (PHP)
Adventist Behavioral Healthcare
Rockville
09.2017 - 04.2018
- Completed initial treatment plans for patient admissions to the PHP and Intensive Outpatient Program (IOP).
- Completed suicidal assessment for PHP and IOP admissions, as well as, for patients who identified as having suicidal ideation within the last 24 hours.
- Attended treatment planning bi-weekly meetings and reviewed patients' progress reports to ensure that they were meeting the goals of their treatment plans.
- Documented and developed corrective actions for resident unusual activities, incidents, behavior, and conditions.
School Age/ Preschool Teacher
Montgomery Child Care Association
Garrett Park
03.2014 - 05.2015
- Facilitated parent-teacher meetings to report the growth and progress of children.
- Communicated with parents on a regular basis to engage them in their children's education.
- Planned and organized lesson plans.
- Assisted in creating instructional materials and procedures consistent with each child's learning needs and behaviors.
- Monitored students in a variety of educational environments, including classroom, playground, field trips, nap times, etc. for the purpose of providing a safe and positive learning environment.
Education
Bachelor of Social Work - Sociology
University of Maryland Baltimore County
Baltimore, MDAssociate of Arts - Early Childhood Education
Montgomery College
Rockville, MDSkills
- Privacy compliance
- Incident response planning
- Privacy impact assessment
- Policy writing
- Compliance auditing
- Stakeholder collaboration
- Risk analysis/assessment
- Regulatory analysis
- Effective communication
- Problem solving
- Attention to detail
- Training development
- Documentation management
- Project management
- Microsoft office
- Research and analysis
- Information gathering
- Data protection regulations
Clearance
Public Trust (DHS)
Timeline
Privacy Analyst/Senior Consultant
Savan Group
02.2021 - 09.2025
Privacy and Data Compliance Officer
Centers for Behavioral Health, LLC
04.2018 - 12.2020
Intern, Partial Hospitalization Program (PHP)
Adventist Behavioral Healthcare
09.2017 - 04.2018
School Age/ Preschool Teacher
Montgomery Child Care Association
03.2014 - 05.2015
Bachelor of Social Work - Sociology
University of Maryland Baltimore County
Associate of Arts - Early Childhood Education
Montgomery College