Cybersecurity Governance & Policy Specialist — Level II

Rividium Inc; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

RiVidium, Inc. is seeking a Cybersecurity Governance & Policy Specialist Level II to support governance, policy, and compliance across the DHS Intelligence Enterprise. You will analyze federal guidance, draft policy documentation, and coordinate with ISSMs/ISSOs and government stakeholders to ensure policy alignment.

You will research new requirements, prepare summaries for leadership, and help maintain policy governance materials and executive briefings for senior leadership.

Qualifications

• Active TS/SCI clearance required.
• Minimum 5 years of experience in cybersecurity governance, policy analysis, info assurance, or cyber compliance in federal government/IC.
• Experience translating guidance into policy and implementation documents.
• Experience drafting executive correspondence and policy memos.

Responsibilities

• Review and implement changes to federal, DHS, and IC cyber policies and guidance.
• Research EO/NSM/OMB guidance and prepare leadership briefings.
• Draft stakeholder notifications for policy changes and distribution by CISO.
• Develop policy addenda, implementation guidance, and policy rescission docs.
• Maintain governance compliance tracker and weekly status updates.

Skills

TS/SCI clearance

5+ years cyber governance

NIST SP 800-53

RMF

CNSSI 1253

DHS 4300C

policy writing

Executive communications

Education

Bachelor's degree in Cybersecurity/Info Systems/CS/ PoliSci/ Public Admin/ Info Assurance

Tools

SharePoint

Microsoft Office 365

Job description

The Cybersecurity Governance & Policy Specialist - Level II supports the development, implementation, and maintenance of cybersecurity governance, policy, and compliance activities for the Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE). Working under the direction of the Senior Security Governance and Policy Analyst, this position assists with researching emerging cybersecurity requirements, analyzing Federal and Intelligence Community (IC) guidance, and ensuring DHS IE cybersecurity policies remain aligned with current Federal laws, Executive Orders, DHS directives, and IC cybersecurity standards.

The ideal candidate possesses strong analytical, research, technical writing, and organizational skills, with experience supporting cybersecurity governance initiatives within classified Federal or Intelligence Community environments. This role collaborates closely with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), cybersecurity leadership, and Government stakeholders to promote policy compliance and effective cybersecurity governance across the enterprise.

Key Responsibilities

• Support the Senior Cybersecurity Governance and Policy Analyst in reviewing, analyzing, and implementing changes to Federal, DHS, and Intelligence Community cybersecurity policies, directives, standards, and guidance.
• Research newly issued Executive Orders (EOs), National Security Memoranda (NSMs), Office of Management and Budget (OMB) guidance, DHS directives, and IC cybersecurity policies; prepare summaries and recommendations for leadership review.
• Draft stakeholder notifications regarding cybersecurity policy changes, updates, and rescissions for review and distribution by the Chief Information Security Officer (CISO).
• Assist in developing Policy Addenda, implementation guidance, and policy rescission documentation for Cybersecurity Division leadership.
• Maintain the cybersecurity governance compliance tracker and update policy implementation status on a weekly basis.
• Maintain SharePoint sites and centralized repositories containing cybersecurity policies, governance documentation, meeting records, and reference materials.
• Support the preparation of executive briefings, decision papers, white papers, presentation materials, and governance reports for senior leadership.
• Assist with Intelligence Community Oversight Program (ICOP) briefings and governance working group presentations.
• Monitor DHS Component compliance with cybersecurity policy requirements and assist in compiling compliance status reports and metrics.
• Support Government data calls, taskers, audits, inspections, and special reporting requirements.
• Coordinate governance meetings, working groups, and stakeholder communications; document meeting minutes and track action items.
• Maintain centralized records of governance decisions, policy changes, waivers, and compliance documentation.
• Assist with quality assurance reviews of governance documents to ensure consistency with Federal and Intelligence Community requirements.
• Collaborate with cybersecurity teams to promote policy awareness and governance best practices throughout the enterprise.

Minimum Qualifications

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
• Minimum 5 years of experience supporting cybersecurity governance, policy analysis, information assurance, or cybersecurity compliance within the Federal Government or Intelligence Community.
• Working knowledge of:
  • NIST SP 800-53
  • NIST Risk Management Framework (RMF)
  • CNSSI 1253
  • DHS Sensitive Systems Policy Directive 4300C
  • Intelligence Community cybersecurity directives and governance requirements
• Experience researching cybersecurity regulations and translating technical guidance into policy recommendations and implementation documentation.
• Experience preparing executive correspondence, policy memoranda, briefing materials, reports, and technical documentation.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Political Science, Public Administration, Information Assurance, or a related discipline.
• Excellent analytical, organizational, technical writing, verbal communication, and presentation skills.
• Proficiency with Microsoft Office 365, including Word, Excel, PowerPoint, Outlook, and Teams.

Preferred Qualifications

• Current Certified Information Systems Security Professional (CISSP), CompTIA Security+, or Certified Authorization Professional (CAP) certification.
• Experience supporting DHS Intelligence & Analysis (I&A) or other Intelligence Community cybersecurity organizations.
• Experience administering or maintaining SharePoint sites and collaboration platforms.
• Familiarity with Governance, Risk, and Compliance (GRC) platforms such as RSA Archer.
• Experience supporting cybersecurity audits, inspections, policy compliance assessments, and governance reviews.
• Knowledge of Executive Orders, National Security Memoranda (NSMs), OMB Circulars, FISMA, and other Federal cybersecurity mandates.

Required Certifications

• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)
• Certified Authorization Professional (CAP)

Clearance Requirement

Active Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance Required

About the Organization Established in 2008, RiVidium, Inc. (dba TripleCyber) is a VA-Verified SDVOSB and an SBA-Certified 8(a) company. To prepare our clients for the future, RiVidium has balanced all parts of our organization to attract the finest employees in order to 'Strive to be the missing element defining tomorrow's technology'. RiVidium keeps pace and surpasses its competitors by meeting challenges of advancements in Logistics, Human Capital, Cyber, Intelligence & Technology.

EOE Statement We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law. If you need a reasonable accommodation for any part of the employment process, please contact Human Resources (HR) at [e-mail].