Senior Security Governance and Policy Analyst

Tharros; Washington (District of Columbia); Presencial; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Dental insurance

Vision insurance

Disability coverage

Savings & retirement

Paid leave

Referral bonuses

Descripción de la vacante

Tharros in the National Capital Region seeks a Senior Security Governance and Policy Analyst to support a DHS cybersecurity program. You will translate policy into practical implementation for cloud, on-premises, classified and unclassified environments.

The role requires an active Top Secret clearance, 10+ years of experience, and strong policy, governance and communication skills to brief executives and drive RMF, FISMA, CNSSI and NIST control mappings.

Formación

• Active Top Secret clearance with SCI eligibility.
• 10+ years in cybersecurity governance or policy program work.
• Knowledge of Federal, DHS, and Intelligence Community policies.
• CISSP or CISM certification or equivalent experience.
• Experience with cloud and on-prem environments.
• Ability to translate policy into implementable plans.
• Strong written and verbal communication skills.
• familiarity with RMF, FISMA, CNSSI, NIST 800-53 and GRC.
• Willingness to work onsite at a government location.
• Ability to coordinate with governance, risk and compliance stakeholders.

Responsabilidades

• Serve as a senior cybersecurity governance and policy advisor supporting leadership.
• Analyze cybersecurity requirements from policies, directives, standards and guidance.
• Develop and update cybersecurity policies, standards and governance docs.
• Support RMF, FISMA, CNSSI, NIST 800-53 and related controls.
• Review policy changes and propose practical implementation approaches.
• Update policy manuals, supply chain risk and governance artifacts.
• Coordinate with stakeholders to map controls and policy implementation.
• Research new federal and IC cybersecurity requirements and orders.
• Support audit responses, inspections, and oversight efforts.
• Prepare executive summaries, briefings and stakeholder communications.
• Contribute to governance working groups and policy references.

Conocimientos

Clearance: TS

Policy analysis

Executive comms

RMF/NIST knowledge

Cloud & on-prem

Governance docs

Stakeholder mgmt

Descripción del empleo

Tharros is looking for courageous team members that enable government missions to move forward with confidence.

Who We Are

At Tharros, expertise, confidence and continuous advancement are at the foundation of what we do. With us, you work with the world’s preeminent vulnerability experts to not only advance government missions, but also your own career path. We’re looking for confident leaders to grow and evolve as we do, protecting our nation’s protectors with cutting-edge cybersecurity tools.

Seeing everything includes seeing everyone. Tharros moves missions forward with a courageous team of experts and a variety of perspectives.

Outperform

Lead with Growth

Dare to Secure

At Tharros, we have exceptional benefits because our employees’ success is our success. We support our team members’ growth with training opportunities, tools and resources.

Outperform the Expected

Tharros sets high standards because we know our team can meet and exceed them. We anticipate success, expect exceptional results and ensure impact for everyone.

Lead with Continuous Growth

When our employees grow, everyone thrives. As the leaders in vulnerability research, we grow capability for our clients and our employees.

Dare to Secure Anything

At the cutting-edge of cybersecurity technology, Tharros dares to create tools that will have maximum mission impact. Our company culture reflects this confidence.

Benefits of Working with Tharros

Moving boldly forward requires a strong foundation. Tharros provides foundational benefits that help our employees grow and thrive.

To be the best, you join the best. Tharros offers competitive compensation and comprehensive benefits including.

• medical
• dental
• vision
• disability coverage
• savings & retirement
• paid leave
• We’re not afraid to show our commitment to growing our Tharros team. We offer generous referral bonuses to employees who help us reach hiring goals.

At Tharros, leaders develop leaders. Working at Tharros gives our employees access to resources and expertise found nowhere else, and we nurture the future leaders in cybersecurity from within our ranks.

Training & Certification Reimbursement

• Education reimbursement benefit of up to $5,250 per year to help our employees thrive.

Breaking Barriers to Cybersecurity Success

Our people-first culture enables more flexibility for our employees to find success in cyber fields. At Tharros, there are no barriers between you, the world’s leading cybersecurity experts, and our customers.

Senior Security Governance and Policy Analyst

Tharros is seeking a Senior Security Governance and Policy Analyst to support a DHS cybersecurity program in the National Capital Region.

This role will support cybersecurity governance, policy, compliance, and executive communications across a complex mission environment. The ideal candidate can translate Federal, DHS, and Intelligence Community cybersecurity policy into practical implementation plans and help senior cybersecurity leaders drive consistent governance across cloud, on-premise, classified, and unclassified environments.

Responsibilities:

• Serve as a senior cybersecurity governance and policy advisor supporting cybersecurity leadership.
• Analyze cybersecurity requirements derived from policies, directives, standards, and guidance.
• Develop and update cybersecurity policies, standards, governance documentation, and implementation recommendations.
• Support governance activities related to RMF, FISMA, CNSSI standards, NIST 800-53, security control catalogs, supply chain risk management, AI/ML security considerations, and cybersecurity compliance.
• Review changes to Federal, DHS, Intelligence Community, and other applicable cybersecurity policies and recommend practical implementation approaches.
• Support updates to security policy manuals, supply chain risk management policy, security control catalogs, and related governance artifacts.
• Coordinate with governance, risk, and compliance stakeholders to support accurate control mapping and policy implementation.
• Research new or updated cybersecurity Executive Orders, Intelligence Community policies, national security guidance, and related requirements.
• Support cybersecurity audit response activities, including inspection, compliance, and oversight-related efforts.
• Prepare executive summaries, reports, talking points, briefings, stakeholder communications, and senior-leader presentation materials.
• Support cybersecurity governance working groups, taskers, data calls, trackers, repositories, and policy reference updates.
• Help identify opportunities to improve governance processes, streamline policy implementation, and increase consistency across cybersecurity compliance activities.

Requirements:

• Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
• 10+ years of experience supporting cybersecurity projects of similar size and complexity.
• Knowledge of Federal, DHS, and Intelligence Community cybersecurity policy and guidance.
• CISSP or CISM certification, or equivalent.
• Experience with cloud and on-premise environments.
• Experience translating cybersecurity policy into implementable plans.
• Strong written and verbal communication skills.
• Experience developing cybersecurity policy, governance documentation, executive briefings, reports, and stakeholder communications.
• Familiarity with RMF, FISMA, CNSSI, NIST 800-53, GRC processes, security control catalogs, and cybersecurity compliance.
• Ability to work onsite at a Government-approved location as required.
• Strong written and verbal communication skills.

Preferred Qualifications:

• Prior DHS, Intelligence Community, CISO office, ISSM, Authorizing Official, or national security cybersecurity governance experience.
• Experience with classified cybersecurity policy, SCI systems governance, DHS 4300-series guidance, ICD 503, CNSSI 1253, or related security frameworks.
• Experience with cloud security governance, hybrid environments, AI/ML policy considerations, Zero Trust policy implementation, or supply chain risk management.
• Experience preparing senior-leader briefings, audit responses, governance materials, working group updates, and stakeholder communications.

Equal Opportunity Employment

Tharros is committed to implementing employment programs and policies dedicated to equal employment opportunity and nondiscrimination. Learn more today.

Be Bold with Tharros

Want to learn more about what it means to work with the world’s preeminent cyber vulnerability experts? Contact us to learn more about who we are and how you can join us.