Senior Zero Trust Policy Architect (Hybrid, MD)

Gunnison; Chevy Chase (MD); Hybrid; USD 95,000 - 107,000; Full time

Benefits offered by this job

Personal Leave (3 weeks) toll

Paid Holidays (11 days)

Flexible Time Off (5 days)

401(k) company match

Medical, Dental and Vision Insurance

Life and Disability Insurance

Public Transportation Subsidies

Certifications and Training Allowance

Job summary

Gunnison Consulting Group in Bethesda, MD, is seeking a Policy Analyst to lead Security Policy and Standards Support for ZTA operations under NIH OCIO guidance. This hybrid role blends federal policy work with governance, risk management, and enterprise policy development.

You will translate mandates into an NIH policy framework, draft policy anchors and briefs, and ensure alignment with AI governance and data-management requirements, while maintaining Section 508 compliance.

Qualifications

• US Citizenship required.
• 8+ years in federal cybersecurity policy, governance, or compliance.
• Working knowledge of HHS IS2P, FISMA, NIST frameworks, and OMB M-22-09.
• Excellent technical writing and policy-drafting skills.
• Bachelor's degree.
• Security+ or CAP/CGRC certification.

Responsibilities

• Lead Security Policy and Standards Support for ZTA Operationalization under NIH OCIO guidance.
• Develop policy anchors, risk-based frameworks, and adoption paths.
• Write ZTA Policy Briefs and enterprise communications conforming to Section 508.
• Align policy with AI governance and data-management requirements.

Skills

Excellent technical writing

Policy-drafting skills

Strategic thinking

Education

Bachelor's degree

Tools

Microsoft 365/SharePoint

Confluence

OCIO ZTA Wiki

Jira

Job description

Gunnison Consulting Group in Bethesda, MD, is seeking a Policy Analyst to lead Security Policy and Standards Support for ZTA operations under NIH OCIO guidance. This hybrid role blends federal policy work with governance, risk management, and enterprise policy development.

You will translate mandates into an NIH policy framework, draft policy anchors and briefs, and ensure alignment with AI governance and data-management requirements, while maintaining Section 508 compliance.