Cybersecurity Governance and Policy Analyst

Tharros; Washington (District of Columbia); On-site; USD 110,000 - 145,000; Full time

Benefits offered by this job

Education reimbursement

Training & Certification reimbursement

Job summary

Tharros is seeking a Cybersecurity Governance and Policy Analyst to support DHS Intelligence Enterprise. You will develop and maintain cybersecurity policies, translate requirements into actionable policy, and assist with audits and leadership briefings.

This on-site role in Washington, DC requires a TS clearance and strong policy-writing skills. You will work with the CISO and GRC to ensure RMF alignment, respond to audits, and prepare executive communications.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 6 years' experience in cybersecurity or IT compliance.
• Minimum of 3 years' experience in cybersecurity policy, governance, or compliance.
• Active Top Secret clearance with contingency on DOD SCI eligibility.
• Knowledge of NIST SP 800-53, CNSSI 1253, and IC overlays.
• Knowledge of the Risk Management Framework (RMF), ICD 503, and FISMA.
• Knowledge of Federal cybersecurity policy development and review processes.
• Knowledge of Federal cybersecurity audit processes.
• Skill in writing policy, standards, and executive-level communications.
• Ability to track and coordinate taskers across multiple stakeholders.

Responsibilities

• Develop and update enterprise cybersecurity policies and standards covering RMF, CNSSI, supply chain risk management, and AI/ML security.
• Research new Executive Orders, IC policies, and national security memos and recommend implementation actions.
• Identify required updates to the SCI Systems Instruction Manual (4300C), SCRM policy, and Security Common Controls Catalog.
• Coordinate with GRC personnel to validate control requirements in the GRC tool.
• Prepare responses in support of OIG FISMA and JWICS Cybersecurity Inspection Program audits.
• Draft stakeholder notifications and policy addendum or rescission language for CISO approval.
• Prepare reports, executive summaries, talking points, and briefing slides for the CISO and stakeholder forums.
• Maintain CISO SharePoint policy sites, the governance meeting calendar, and the data-call and tasker tracker.

Skills

Policy writing

Communication

Project coordination

MS Office / collaboration tools

Education

BS in Information Technology, Cybersecurity, Information Systems, or Computer Science

Tools

Microsoft Office Suite

Job description

Tharros is looking for courageous team members that enable government missions to move forward with confidence.

Who We Are

At Tharros, expertise, confidence and continuous advancement are at the foundation of what we do. With us, you work with the world’s preeminent vulnerability experts to not only advance government missions, but also your own career path. We’re looking for confident leaders to grow and evolve as we do, protecting our nation’s protectors with cutting-edge cybersecurity tools.

Seeing everything includes seeing everyone. Tharros moves missions forward with a courageous team of experts and a variety of perspectives.

Outperform

Lead with Growth

Dare to Secure

At Tharros, we have exceptional benefits because our employees’ success is our success. We support our team members’ growth with training opportunities, tools and resources.

Outperform the Expected

Tharros sets high standards because we know our team can meet and exceed them. We anticipate success, expect exceptional results and ensure impact for everyone.

Lead with Continuous Growth

When our employees grow, everyone thrives. As the leaders in vulnerability research, we grow capability for our clients and our employees.

Dare to Secure Anything

At the cutting-edge of cybersecurity technology, Tharros dares to create tools that will have maximum mission impact. Our company culture reflects this confidence.

Benefits of Working with Tharros

Moving boldly forward requires a strong foundation. Tharros provides foundational benefits that help our employees grow and thrive.

To be the best, you join the best. Tharros offers competitive compensation and comprehensive benefits including medical, dental, vision and disability coverage, savings & retirement and paid leave.

At Tharros, leaders develop leaders. Working at Tharros gives our employees access to resources and expertise found nowhere else, and we nurture the future leaders in cybersecurity from within our ranks.

We’re not afraid to show our commitment to growing our Tharros team. We offer generous referral bonuses to employees who help us reach hiring goals.

Training & Certification Reimbursement

Tharros is always advancing. We offer an education reimbursement benefit of up to $5,250 per year to help our employees thrive.

Breaking Barriers to Cybersecurity Success

Our people-first culture enables more flexibility for our employees to find success in cyber fields. At Tharros, there are no barriers between you, the world’s leading cybersecurity experts, and our customers.

Cybersecurity Governance and Policy Analyst

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise. In support of this mission, we have an immediate opportunity for a Cybersecurity Governance and Policy Analyst.

In this role you will help develop and maintain the cybersecurity policies that govern the DHS Intelligence Enterprise, translating Federal and Intelligence Community (IC) requirements into policy the enterprise can implement. You will work alongside the senior policy advisor to the Chief Information Security Officer (CISO), support cybersecurity audits, and prepare briefings for leadership. This position is on-site in a Government SCIF in Washington, DC.

• Develop and update enterprise cybersecurity policies and standards covering RMF, CNSSI, supply chain risk management, and AI/ML security.
• Research new Executive Orders, IC policies, and national security memos and recommend implementation actions.
• Identify required updates to the SCI Systems Instruction Manual (4300C), SCRM policy, and Security Common Controls Catalog.
• Coordinate with GRC personnel to validate control requirements in the GRC tool.
• Prepare responses in support of OIG FISMA and JWICS Cybersecurity Inspection Program audits.
• Draft stakeholder notifications and policy addendum or rescission language for CISO approval.
• Prepare reports, executive summaries, talking points, and briefing slides for the CISO and stakeholder forums.
• Maintain CISO SharePoint policy sites, the governance meeting calendar, and the data-call and tasker tracker.

Requirements:

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 6 years' experience in cybersecurity or IT compliance.
• Minimum of 3 years' experience in cybersecurity policy, governance, or compliance.
• Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
• Knowledge of NIST SP 800-53, CNSSI 1253, and IC overlays.
• Knowledge of the Risk Management Framework (RMF), ICD 503, and FISMA.
• Knowledge of Federal and IC cybersecurity policy development and review processes.
• Knowledge of Federal cybersecurity audit processes.
• Skill in writing policy, standards, and executive-level communications.
• Ability to track and coordinate taskers across multiple stakeholders.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.
• CISSP, CISM, CGRC, or CompTIA Security+ certification.
• Experience with DHS 4300C or IC supply chain risk management policy.

Equal Opportunity Employment

Tharros is committed to implementing employment programs and policies dedicated to equal employment opportunity and nondiscrimination. Learn more today.

Be Bold with Tharros

Want to learn more about what it means to work with the world’s preeminent cyber vulnerability experts? Contact us to learn more about who we are and how you can join us.