Cyber Policy & Governance Analyst

ANALYGENCE; Washington (District of Columbia); On-site; USD 110,000 - 170,000; Full time

Job summary

Tharros in Washington, DC, supports the DHS with cybersecurity services and is actively seeking a Security Governance and Policy Analyst for on-site work in a Government SCIF. You will develop and maintain cybersecurity policies, translate federal/IC requirements into actionable policy, and support audits alongside the senior policy advisor to the CISO.

You will research orders and IC policies, draft policy language, and coordinate with GRC personnel to validate controls.

Qualifications

• BS degree in IT, cybersecurity, information systems or computer science, or 6+ years in cybersecurity/IT compliance.
• Minimum 3 years in cybersecurity policy, governance or compliance.
• Active TS/SCI clearance and U.S. citizenship; willing to undergo a DHS polygraph.
• Knowledge of NIST SP 800-53, CNSSI 1253, and IC overlays.
• Knowledge of RMF, ICD 503, and FISMA.
• Knowledge of Federal and IC policy development and review processes.
• Knowledge of federal cybersecurity audit processes.
• Excellent policy-writing and executive communication skills.

Responsibilities

• Develop and update enterprise cybersecurity policies and standards.
• Research Executive Orders, IC policies, and memos; recommend actions.
• Identify updates to 4300C, SCRM policy, and Security Catalog.
• Coordinate with GRC to validate control requirements.
• Prepare responses for FISMA and JWICS audits.
• Draft stakeholder communications and policy addenda.
• Prepare reports and briefing slides for the CISO and forums.
• Maintain CISO SharePoint policy sites and governance calendar.

Skills

Policy development

Governance

Compliance

Cybersecurity

Policy writing

Written communication

Stakeholder coordination

Audits

GRC awareness

Education

BS in IT/Cybersecurity/InfoSystems/CS

Tools

GRC tool

Microsoft Office

SharePoint

Job description

Tharros in Washington, DC, supports the DHS with cybersecurity services and is actively seeking a Security Governance and Policy Analyst for on-site work in a Government SCIF. You will develop and maintain cybersecurity policies, translate federal/IC requirements into actionable policy, and support audits alongside the senior policy advisor to the CISO.

You will research orders and IC policies, draft policy language, and coordinate with GRC personnel to validate controls.