Cybersecurity Policy & Governance Lead

Tharros; Washington (District of Columbia); Sur place; USD 110 000 - 145 000; Plein temps

Avantages offerts par ce poste

Education reimbursement

Training & Certification reimbursement

Résumé du poste

Tharros is seeking a Cybersecurity Governance and Policy Analyst to support DHS Intelligence Enterprise. You will develop and maintain cybersecurity policies, translate requirements into actionable policy, and assist with audits and leadership briefings.

This on-site role in Washington, DC requires a TS clearance and strong policy-writing skills. You will work with the CISO and GRC to ensure RMF alignment, respond to audits, and prepare executive communications.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 6 years' experience in cybersecurity or IT compliance.
• Minimum of 3 years' experience in cybersecurity policy, governance, or compliance.
• Active Top Secret clearance with contingency on DOD SCI eligibility.
• Knowledge of NIST SP 800-53, CNSSI 1253, and IC overlays.
• Knowledge of the Risk Management Framework (RMF), ICD 503, and FISMA.
• Knowledge of Federal cybersecurity policy development and review processes.
• Knowledge of Federal cybersecurity audit processes.
• Skill in writing policy, standards, and executive-level communications.
• Ability to track and coordinate taskers across multiple stakeholders.

Responsabilités

• Develop and update enterprise cybersecurity policies and standards covering RMF, CNSSI, supply chain risk management, and AI/ML security.
• Research new Executive Orders, IC policies, and national security memos and recommend implementation actions.
• Identify required updates to the SCI Systems Instruction Manual (4300C), SCRM policy, and Security Common Controls Catalog.
• Coordinate with GRC personnel to validate control requirements in the GRC tool.
• Prepare responses in support of OIG FISMA and JWICS Cybersecurity Inspection Program audits.
• Draft stakeholder notifications and policy addendum or rescission language for CISO approval.
• Prepare reports, executive summaries, talking points, and briefing slides for the CISO and stakeholder forums.
• Maintain CISO SharePoint policy sites, the governance meeting calendar, and the data-call and tasker tracker.

Connaissances

Policy writing

Communication

Project coordination

MS Office / collaboration tools

Formation

BS in Information Technology, Cybersecurity, Information Systems, or Computer Science

Outils

Microsoft Office Suite

Description du poste

Tharros is seeking a Cybersecurity Governance and Policy Analyst to support DHS Intelligence Enterprise. You will develop and maintain cybersecurity policies, translate requirements into actionable policy, and assist with audits and leadership briefings.

This on-site role in Washington, DC requires a TS clearance and strong policy-writing skills. You will work with the CISO and GRC to ensure RMF alignment, respond to audits, and prepare executive communications.