IT - Information Security/Privacy Analyst II

PlanIT Group, LLC; Reston (VA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

PlanIT Group, LLC in Reston, VA is seeking a Policy Specialist with 8–12 years of policy writing experience to analyze and draft governance policies aligned with industry standards and stakeholder needs.

You will translate complex security concepts into clear documentation, collaborate with security engineers, compliance officers, and business managers, and support lifecycle updates across groups beyond CISO.

Qualifications

• 2-3 years of technical writing experience in policy analysis or a related role.
• Knowledge of AI tools and capabilities to perform technical writing.
• Good working knowledge of NIST CSF and CIS Controls and other relevant security frameworks.
• Ability to distill complex technical concepts into clear, concise, and actionable language.
• Excellent written and verbal communication skills, including the ability to tailor messaging for diverse audiences.
• Strong research skills, with the ability to contribute meaningfully to lifecycle updates.
• Strong collaboration skills, with the ability to work effectively across technical and non-technical teams.
• Familiarity with security governance, risk management, and compliance (GRC) processes.
• Bachelor's degree in public policy, political science, law, economics, or a related field.

Responsibilities

• Research, draft, and analyze policies to ensure alignment with stakeholder needs, subject matter experts, industry standards, and organizational goals.
• Conduct gap analyses against industry frameworks and regulatory requirements, to recommend policy enhancements.
• Collaborate with security engineers, compliance officers, and business managers to ensure policies are both technically sound and operationally practical.
• Translate technical security concepts into clear, concise, and accessible documentation for diverse audiences.
• Collaborate with stakeholders to update CISO policies for annual lifecycle updates.
• Review and contribute to policies and standards for groups outside of CISO.
• A minimum of eight (8) to twelve (12) years' relevant experience.
• A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field then four additional years of related experience is required.

Skills

Technical writing

Policy analysis

AI tools knowledge

NIST CSF & CIS Controls

Clear communication

Research skills

cross-functional collaboration

Education

Bachelor's degree in public policy, political science, law, economics, or related field

Job description

• 2-3 years of technical writing experience in policy analysis or a related role.
• Knowledge of AI tools and capabilities to perform technical writing.
• Good working knowledge of NIST CSF and CIS Controls and other relevant security frameworks.
• Ability to distill complex technical concepts into clear, concise, and actionable language.
• Excellent written and verbal communication skills, including the ability to tailor messaging for diverse audiences.
• Strong research skills, with the ability to contribute meaningfully to lifecycle updates.
• Strong collaboration skills, with the ability to work effectively across technical and non-technical teams.
• Familiarity with security governance, risk management, and compliance (GRC) processes.
• Bachelor's degree in public policy, political science, law, economics, or a related field.

Policy Specialist

Required Skills

• 2-3 years of technical writing experience in policy analysis or a related role.
• Knowledge of AI tools and capabilities to perform technical writing.
• Good working knowledge of NIST CSF and CIS Controls and other relevant security frameworks.
• Ability to distill complex technical concepts into clear, concise, and actionable language.
• Excellent written and verbal communication skills, including the ability to tailor messaging for diverse audiences.
• Strong research skills, with the ability to contribute meaningfully to lifecycle updates.
• Strong collaboration skills, with the ability to work effectively across technical and non-technical teams.
• Familiarity with security governance, risk management, and compliance (GRC) processes.
• Bachelor's degree in public policy, political science, law, economics, or a related field.

What You Will Do

• Research, draft, and analyze policies to ensure alignment with stakeholder needs, subject matter experts, industry standards, and organizational goals.
• Conduct gap analyses against industry frameworks and regulatory requirements, to recommend policy enhancements.
• Collaborate with security engineers, compliance officers, and business managers to ensure policies are both technically sound and operationally practical.
• Translate technical security concepts into clear, concise, and accessible documentation for diverse audiences.
• Collaborate with stakeholders to update CISO policies for annual lifecycle updates.
• Review and contribute to policies and standards for groups outside of CISO.
• A minimum of eight (8) to twelve (12) years' relevant experience.
• A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field then four additional years of related experience is required.

Additional Provisions

• Pass a client mandated clearance process to include drug screening, criminal history check and credit check.
• Once candidate's resume is approved and interview passed, the agency is responsible for providing drug screening. Failure to submit the drug screening results will delay the security clearance process.
• If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance.
• All candidates must be a US Citizen or permanent status Green Card holder.
• Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)
• All overtime must be pre-approved in writing by the client manager or his/her designated representative.
• Agency will not be reimbursed for overtime charges without previous written authorization. Authorized overtime will be reimbursed at straight time.
• The enforced dress code is business casual, i.e., collared shirt with slacks for men, no skirts above the knee for women.