TS/SCI Security Policy & Governance Analyst

Jimmy Jazz; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

Tharros is seeking a Security Governance and Policy Analyst to develop and maintain cybersecurity policies for the DHS Intelligence Enterprise. You will translate federal requirements into actionable policy, support audits, and prepare leadership briefings.

This on-site role sits in a Government SCIF in Washington, DC. You will coordinate RMF/CNSSI/SCRM policy efforts, review Executive Orders and IC policies, and collaborate with GRC personnel to ensure compliance across programs.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 6 years' experience in cybersecurity or IT compliance.
• Minimum of 3 years' experience in cybersecurity policy, governance, or compliance.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.
• Knowledge of NIST SP 800-53, CNSSI 1253, and IC overlays.
• Knowledge of RMF, ICD 503, and FISMA.
• Knowledge of Federal and IC cybersecurity policy development and review processes.
• Knowledge of Federal cybersecurity audit processes.
• Excellent written and oral communications skills.

Responsibilities

• Develop and update enterprise cybersecurity policies and standards covering RMF, CNSSI, supply chain risk management, and AI/ML security.
• Research new Executive Orders, IC policies, and national security memos and recommend implementation actions.
• Identify required updates to the SCI Systems Instruction Manual (4300C), SCRM policy, and Security Common Controls Catalog.
• Coordinate with GRC personnel to validate control requirements in the GRC tool.
• Prepare responses in support of OIG FISMA and JWICS Cybersecurity Inspection Program audits.
• Draft stakeholder notifications and policy addendum or rescission language for CISO approval.
• Prepare reports, executive summaries, talking points, and briefing slides for the CISO and stakeholder forums.
• Maintain CISO SharePoint policy sites, the governance meeting calendar, and the data-call and tasker tracker.

Skills

Policy writing

Executive communications

Policy governance

Written & oral communication

Education

BS degree in IT / cybersecurity / information systems / computer science

Tools

MS Office Suite

GRC tools

Job description

Tharros is seeking a Security Governance and Policy Analyst to develop and maintain cybersecurity policies for the DHS Intelligence Enterprise. You will translate federal requirements into actionable policy, support audits, and prepare leadership briefings.

This on-site role sits in a Government SCIF in Washington, DC. You will coordinate RMF/CNSSI/SCRM policy efforts, review Executive Orders and IC policies, and collaborate with GRC personnel to ensure compliance across programs.