Cyber Policy Analyst

Amentum•Washington, DC

4d•$160,000 - $175,000•Onsite

About The Position

Amentum is seeking a dynamic, flexible, and adaptive Cyber Policy Analyst to support the U.S. Department of Defense Office of the Chief Information Officer. The role focuses on cyber risk assessment, information assurance, cyber policy development, and working group support across topics including cloud computing. The successful candidate will be organized, detail-oriented, team-focused, and able to research, think critically, write succinctly, communicate with senior leaders, and manage deadlines. The analyst will review Exception to Policy applications for completeness, accuracy, and compliance with organizational frameworks and policy; examine related network topology, access controls, system security plans, security assessment reports, and authorizations to operate; and coordinate with organizations and departments to clarify justifications and obtain missing information. The analyst will assess the potential impact, rationale, and risk of policy exceptions to ensure deviations do not compromise safety, security, or compliance with federal and Department policy. The position is based in a traditional office environment. A bachelor's degree and a TS/SCI clearance are required. A master's degree and experience with cyber policy formation in the Department of Defense are desired. Cyber strategy or policy development support experience at a U.S. government agency is required. Compensation is listed as $160,000–$175,000.

Requirements

Bachelor's degree required.
Cyber strategy or policy development support experience at a U.S. government agency required.
Top Secret/Sensitive Compartmented Information (TS/SCI) clearance required.
Background that includes cyber risk assessment and demonstrated Information Assurance experience.
Strong interpersonal, research, and critical-thinking skills.
Ability to write succinctly and manage deadlines.
Well-organized, detail-oriented, and team-focused.

Nice To Haves

Master's degree desired.
Experience with cyber policy formation in the Department of Defense desired.
Familiarity with Department of Defense cyber risk assessment approaches.
Experience examining technical architecture and applying risk assessments in a Department of Defense context.
Familiarity with cloud computing in Department of Defense settings.
Experience writing for and briefing senior executives or leadership.
Intra-agency and interagency coordination experience.

Responsibilities

Support the U.S. Department of Defense Office of the Chief Information Officer with cyber policy analysis and related work.
Support cyber policy development and working groups across topics including cloud computing.
Review Exception to Policy applications for completeness, accuracy, and compliance with organizational frameworks and policy.
Review applications for discrepancies in network topology, access controls, system security plans, security assessment reports, and authorizations to operate.
Serve as the primary liaison between organizations and departments to clarify justifications and gather missing information.
Analyze the potential impact, justification, and risk of granting policy exceptions, ensuring deviations do not compromise safety, security, or compliance with federal and Department policy.
Support Information Assurance efforts.
Write for and brief senior executives and leadership.
Coordinate across agencies and within agencies.