Cybersecurity Governance & Policy Specialist ? Level II
Rividium
An application made for this job — a tailored resume and cover letter that speak straight to the posting.
Job summary
RiVidium Inc. in Washington, DC, seeks a Cybersecurity Governance & Policy Specialist – Level II to develop and maintain cybersecurity policies, standards, and governance in a federal environment.
The role requires translating regulations into actionable guidance and collaborating with cybersecurity, compliance, risk, IT, and program teams. The ideal candidate has strong governance and compliance knowledge, excellent technical writing, and the ability to communicate complex requirements to
Qualifications
- Bachelor’s degree in cybersecurity, information systems, information technology, computer science, political science, or a related field.
- Experience in cybersecurity governance, policy, compliance, information assurance, or risk management.
- Knowledge of cybersecurity policies, standards, frameworks, and regulatory requirements.
Responsibilities
- Develop, review, update, and maintain cybersecurity policies, standards, procedures, guidelines, and governance documentation.
- Analyze federal cybersecurity requirements and determine their impact on organizational policies and security practices.
- Translate cybersecurity regulations, standards, and frameworks into actionable organizational requirements.
- Support the implementation and enforcement of cybersecurity governance processes.
- Conduct policy and compliance reviews to identify gaps, inconsistencies, and areas requiring improvement.
- Assist with developing cybersecurity governance frameworks and operating procedures.
- Support RMF, security authorization, continuous monitoring, and compliance activities.
- Prepare executive briefings, presentations, reports, and governance materials.
Skills
Education
Tools
Job description
Full-Time/Part-Time Full-Time
RiVidium Inc. is seeking an experienced Cybersecurity Governance & Policy Specialist - Level II to support the development, implementation, and maintenance of cybersecurity policies, standards, procedures, and governance processes within a federal environment.
The Cybersecurity Governance & Policy Specialist will help ensure cybersecurity practices align with federal requirements, organizational policies, industry standards, and risk management objectives. This role will work closely with cybersecurity, compliance, risk management, IT, and program teams to translate regulatory and security requirements into practical policies and procedures.
The ideal candidate will have a strong understanding of cybersecurity governance and compliance, excellent technical writing skills, and the ability to interpret complex security requirements and communicate them clearly to technical and non-technical stakeholders.
- Develop, review, update, and maintain cybersecurity policies, standards, procedures, guidelines, and governance documentation.
- Analyze federal cybersecurity requirements and determine their impact on organizational policies and security practices.
- Translate cybersecurity regulations, standards, and frameworks into actionable organizational requirements.
- Support the implementation and enforcement of cybersecurity governance processes.
- Conduct policy and compliance reviews to identify gaps, inconsistencies, and areas requiring improvement.
- Assist with developing cybersecurity governance frameworks and operating procedures.
- Support the alignment of cybersecurity policies with NIST, FISMA, and other applicable federal requirements.
- Research emerging cybersecurity threats, regulations, standards, and industry best practices.
- Perform gap assessments against applicable cybersecurity policies, standards, and regulatory requirements.
- Develop recommendations for addressing identified policy, governance, and compliance gaps.
- Collaborate with cybersecurity engineers, ISSOs, ISSMs, system owners, security assessors, and program leadership.
- Support Risk Management Framework (RMF), security authorization, continuous monitoring, and compliance activities.
- Assist with the development and maintenance of cybersecurity governance metrics and reporting.
- Support cybersecurity risk management and compliance assessments.
- Review security documentation for consistency with established policies and requirements.
- Assist with policy exception, waiver, and risk acceptance processes.
- Support internal and external cybersecurity audits, assessments, and inspections.
- Prepare executive briefings, presentations, reports, and other governance materials.
- Maintain documentation repositories and ensure cybersecurity policies remain current and properly version controlled.
- Provide guidance to stakeholders on cybersecurity policy interpretation and implementation.
- Participate in cybersecurity working groups, governance boards, and customer meetings.
- Support continuous improvement of cybersecurity governance processes and organizational security posture.
- Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Computer Science, Political Science, or a related field.
- Demonstrated experience in cybersecurity governance, policy, compliance, information assurance, risk management, or a related discipline.
- Working knowledge of cybersecurity policies, standards, frameworks, and regulatory requirements.
- Experience developing, reviewing, or implementing cybersecurity policies and procedures.
- Ability to interpret complex cybersecurity requirements and translate them into practical organizational guidance.
- Knowledge of cybersecurity risk management and compliance principles.
- Familiarity with the NIST Risk Management Framework (RMF).
- Understanding of federal cybersecurity requirements and information security best practices.
- Strong technical writing, editing, research, and documentation skills.
- Strong analytical and problem-solving abilities.
- Excellent verbal and written communication skills.
- Ability to work effectively with technical teams, management, and government stakeholders.
- CompTIA Security+
Additional cybersecurity, governance, risk, or compliance certifications are desirable.
- Experience supporting federal civilian or Department of Defense (DoD) cybersecurity programs.
- Knowledge of NIST SP 800-53, NIST SP 800-37, and FISMA.
- Experience developing policies aligned with federal cybersecurity requirements.
- Experience with RMF, Assessment & Authorization (A&A), and security control requirements.
- Familiarity with cybersecurity governance frameworks and industry standards.
- Experience conducting cybersecurity policy and compliance gap assessments.
- Experience supporting cybersecurity audits and regulatory assessments.
- Familiarity with GRC platforms such as RSA Archer, ServiceNow GRC, or eMASS.
- Experience with cybersecurity risk assessments and risk acceptance processes.
- Knowledge of cloud security governance and compliance.
- Experience developing cybersecurity awareness, policy, and training materials.
- Familiarity with security control implementation and assessment processes.
- Certifications such as CISM, CISSP, CAP, CRISC, or CGRC are a plus.
- Cybersecurity Governance
- Cybersecurity Policy Development
- Security Standards and Procedures
- Governance, Risk & Compliance (GRC)
- Cybersecurity Risk Management
- Regulatory Compliance
- NIST Frameworks
- NIST SP 800-53
- NIST SP 800-37
- FISMA
- Risk Management Framework (RMF)
- Assessment & Authorization (A&A)
- Security Controls
- Continuous Monitoring
- Compliance Assessments
- Gap Analysis
- Risk Assessments
- Policy Exception Management
- Risk Acceptance
- Security Documentation
- Technical Writing
- Cybersecurity Metrics and Reporting
- RSA Archer
- ServiceNow GRC
- eMASS
RiVidium Inc is seeking a 'Cybersecurity Governance & Policy Specialist - Level II' to support a federal client. This position is contingent upon contract award and funding approval. As such, this job posting is intended to identify qualified candidates for a potential future opportunity and does not represent a currently available position. Compensation has not yet been determined and will be established based on contract requirements, candidate qualifications, experience, and applicable market conditions.
Established in 2008, RiVidium, Inc. (dba TripleCyber) is a VA-Verified SDVOSB and an SBA-Certified 8(a) company. To prepare our clients for the future, RiVidium has balanced all parts of our organization to attract the finest employees in order to 'Strive to be the missing element defining tomorrow's technology'. RiVidium keeps pace and surpasses its competitors by meeting challenges of advancements in Logistics, Human Capital, Cyber, Intelligence & Technology.
We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law. If you need a reasonable accommodation for any part of the employment process, please contact Human Resources (HR) at hr@rividium.com.
This position is currently accepting applications.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
