Cybersecurity Policy Lead | TS/SCI Eligible

S2i2-Inc; Columbus (OH); On-site; USD 140,000 - 180,000; Full time

Job summary

S2i2-Inc is seeking an experienced Cybersecurity Policy Analyst to develop and streamline DoD/DLA cybersecurity policies, SOPs, and TTPs. The role emphasizes incident response across the DLA enterprise and requires active TS with SCI eligibility.

You will lead CSSP evaluation preparations, coordinate artifact collection, and brief DLA CERT leadership on readiness. RMF packages, training, and incident response activities are core to the position.

Qualifications

• Minimum of seven years in cybersecurity policy development and implementation.
• Experience with DoD cybersecurity policy and CSSP program.
• Strong ability to develop defendable policy and brief senior leadership.
• Familiarity with RMF process and authorization packages.
• Experience preparing for CSSP evaluations and inspections.
• Capable of planning and facilitating cybersecurity tabletop exercises.

Responsibilities

• Develop, review, and streamline DLA CERT cybersecurity policies, SOPs, and TTPs to ensure DoD/DLA compliance.
• Lead CSSP evaluation preparations, including metrics and artifact collection, and brief leadership on readiness.
• Disseminate Cyber Defense directives within 30 minutes and track ongoing compliance.
• Support planning and execution of cybersecurity exercises and generate after-action reports.
• Assist program teams in RMF packages and compliance documentation for authorizations.
• Create and deliver incident response training for ISSMs, admins, and response teams.

Skills

Policy development

Incident response

Leadership briefings

RMF knowledge

Metrics & artifacts

Program coordination

Education

DoD 8570 baseline cert (IAT II)

CSSP Auditor/Incident Responder cert

CISSP/CISM/CISA preferred

Job description

S2i2-Inc is seeking an experienced Cybersecurity Policy Analyst to develop and streamline DoD/DLA cybersecurity policies, SOPs, and TTPs. The role emphasizes incident response across the DLA enterprise and requires active TS with SCI eligibility.

You will lead CSSP evaluation preparations, coordinate artifact collection, and brief DLA CERT leadership on readiness. RMF packages, training, and incident response activities are core to the position.