Cybersecurity Policy Analyst

Steampunk - McLean, VA

Full-time - Mid Level

McLean, VA

Food Services and Drinking Places

About the position

We are committed to helping our clients navigate the complex world of technology and security, ensuring that they have the tools and expertise needed to protect critical government assets and data. We develop and execute a strategy for our clients to realize mission goals with the strongest effectiveness possible. We are looking for a knowledgeable and skilled Cybersecurity Policy Analyst to join our team and support our work with the United States federal government. This role is essential in ensuring that our agency leverages technologies and tools while maintaining compliance with federal regulations and safeguarding sensitive information. This is your chance to work with a distinguished federal law enforcement agency committed to maintaining the highest standards of security and integrity. As a Cybersecurity Policy Analyst, you will help shape our policies and procedures in the ever-evolving landscape of IT security and technology. You will work with senior leaders and clients to assist in the development of enterprise policies, standards, and standard operating procedures governing applications and technologies. You will help our partners navigate the complex world of technology and security, ensuring that they have the tools and expertise needed to protect critical government assets and data. Collaborating with leadership and stakeholders to create comprehensive cybersecurity policies and guidelines that align with federal regulations, security standards, and best practices is a key part of this role. You will monitor and ensure compliance with policies, regulations, and standards, conducting research and synthesizing information from various sources to prepare detailed reports, briefings, and presentations. Ensuring policies are comprehensive, clear, and aligned with industry standards and regulatory requirements is crucial. You will contribute to discussions and planning sessions, managing multiple projects and deadlines efficiently with a strong attention to detail and exceptional organizational skills. This includes setting goals, timelines, and tracking progress. Understanding and sharing the legal and ethical implications of policies, especially in terms of user privacy, data protection, and artificial intelligence, is essential. You will work closely with IT teams, security teams, legal teams, and other relevant stakeholders to ensure that cybersecurity policies align with the organization's goals and security requirements.

Responsibilities

• Help shape policies and procedures in IT security and technology.
• Assist in the development of enterprise policies, standards, and standard operating procedures.
• Collaborate with leadership and stakeholders to create comprehensive cybersecurity policies and guidelines.
• Monitor and ensure compliance with policies, regulations, and standards.
• Conduct research and synthesize information from various sources to prepare reports, briefings, and presentations.
• Ensure policies are comprehensive, clear, and aligned with industry standards and regulatory requirements.
• Manage multiple projects and deadlines efficiently with strong attention to detail.
• Understand and share the legal and ethical implications of policies regarding user privacy and data protection.
• Work closely with IT, security, and legal teams to align cybersecurity policies with organizational goals.

Requirements

• Ability to hold a position of public trust with the US government.
• Master's Degree and 3 years of relevant experience in policy analysis, government relations, or related fields; OR Bachelor's Degree and 5 years of relevant experience; OR No degree and 9 years of relevant experience.
• Possesses at least one professional certification relevant to the technical service provided.
• Experience writing cybersecurity policies, technical standards, and standard operating procedures.
• Experience applying cybersecurity and data protection frameworks and regulations such as NIST 800-53, HIPAA, GDPR, etc.
• Strong project management skills including developing work plans, conducting resource planning, and managing stakeholder feedback.
• Excellent written and verbal communication skills for conveying complex information clearly to diverse audiences.
• Knowledge of current and emerging cybersecurity and data protection risks, threats, and vulnerabilities.

Nice-to-haves

• Demonstrated knowledge of a variety of IT concepts, practices, and procedures.
• Experience implementing NIST controls.
• Experience developing, updating, and managing policies for a federal organization.

Benefits

• Employee ownership and investment in employees' growth and contributions.
• Equal opportunity employer with consideration for all qualified applicants.