Cyber Policy Lead & Technical Writer

Assurit; Fairfax (VA); In loco; USD 120.000 - 160.000; Tempo pieno

Descrizione del lavoro

Assurit is seeking an experienced Cyber Policy Analyst / Technical Writer to own and manage the cybersecurity policy program for a federal civilian agency, writing, reviewing, and managing security, privacy, and records-management policies and procedures.

You will advise on policy questions, ensure documents meet federal standards, and build a policy catalog and document repository. On-site in Washington, DC, with a focus on compliance and governance.

Competenze

• Bachelor’s degree in computer science or an IT-related field.
• 10+ years writing, reviewing, researching and editing security and technical documents and presentations.
• 10+ years of related information security experience.
• CISSP or an equivalent certification (CISM, CISA or CGRC accepted).
• Hands-on information security policy and procedure development under FISMA and the NIST SP 800 series.
• Working knowledge of RMF, POA&M management and security assessments or audits.
• U.S. citizen, able to pass a High Risk background investigation.
• Able to work on site in Washington, DC during core hours, 8:00 AM-4:00 PM.

Mansioni

• Develop, review and manage security documents to meet customer standards.
• Advise cybersecurity program on policy matters.
• Maintain cybersecurity, privacy and records-management policies, SOPs and related documents.
• Review every policy, procedure and SOP annually against guidance and update them.
• Identify gaps and implement approved fixes.
• Write new policy and documentation for new requirements (EOs, NIST revisions, agency directives).
• Build a cybersecurity core services catalog.
• Review and maintain the customer’s security control catalog and Minimum Security Parameters.
• Create and run a cybersecurity document repository with version control and publishing.
• Run an annual gap analysis of policy and governance program and report on its maturity.
• Translate FISMA/NIST/OMB requirements into clear policy.
• Collaborate with ISSOs, assessors, privacy and audit staff to align policy with RMF/POA&M/incident response.
• Prepare briefings and presentations on policy changes for the CISO and system owners.

Conoscenze

Policy writing

Technical writing

Security policy development

Research and analysis

Communication

Stakeholder collaboration

Formazione

Bachelor's degree in computer science or IT-related field

Strumenti

ServiceNow GRC/IRM

RMF

Descrizione del lavoro

Assurit is seeking an experienced Cyber Policy Analyst / Technical Writer to own and manage the cybersecurity policy program for a federal civilian agency, writing, reviewing, and managing security, privacy, and records-management policies and procedures.

You will advise on policy questions, ensure documents meet federal standards, and build a policy catalog and document repository. On-site in Washington, DC, with a focus on compliance and governance.