Cyber Policy Analyst

ESM • Philadelphia, PA

2d • Hybrid

About The Position

Enterprise Solutions and Management (ESM) is a rapidly growing government contractor providing strategic IT services to Defense and Federal customers. This remote Cyber Policy Analyst role is responsible for reviewing, consolidating, and developing cybersecurity policy in coordination with government stakeholders to ensure compliance with applicable requirements. The position offers technical support and guidance across programs, evaluating IT policies, standards, guidelines, and procedures to balance security needs with operational objectives. Additionally, the analyst will prepare and deliver briefings to senior management on cybersecurity policy updates, changes, and program progress, keeping leadership informed and aligned with evolving security requirements. While remote, candidates must reside within 50 miles of specified locations.

Requirements

• Knowledge of DoD cybersecurity policies, procedures, and implementation frameworks supporting enterprise security operations
• Experience developing and maintaining cybersecurity artifacts, including STIGs, TCG configuration guides, IAVMs, and task orders
• Ability to create, manage, and validate RMF documentation and cybersecurity compliance artifacts
• Skilled in maintaining and tracking POA&M records, including findings, remediation actions, and milestone updates to support issue resolution
• Proficient in data analysis and reporting using tools such as Microsoft Excel, Access, Power BI, and Power Platform to produce audit-ready cybersecurity reports, vulnerability assessments, and trend analyses
• Strong research, analytical, and communication skills with demonstrated ability to work independently or collaboratively and brief leadership on cybersecurity status, risks, and compliance findings
• Seven (7) years cybersecurity policy experience
• IAT II or higher certification
• ACAS training module/course completion
• Tanium training module/course completion
• DLA approved Computing Environment certification
• Secret clearance

Nice To Haves

• Be a positive, self-motivated, and proactive person with the ability to adapt to change and tolerate stressful situations
• Candidate must communicate effectively with team members, team lead, management, and government customer
• Must have the ability and desire to research and develop creative solutions to unique problems with minimal supervision

Responsibilities

• Reviewing, consolidating, and developing cybersecurity policy in coordination with government stakeholders to ensure compliance with applicable requirements
• Providing technical support and guidance across programs while evaluating IT policies, standards, guidelines, and procedures to maintain an effective balance between security needs and operational objectives
• Preparing and delivering briefings to senior management on cybersecurity policy updates, changes, and program progress, ensuring leadership remains informed and aligned with evolving security requirements
• Other duties as assigned

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed