Cyber Policy Writer

Booz Allen Hamilton•Arlington, VA

21d

About The Position

Cyber Policy Writer The Opportunity: When our country’s cybersecurity is on the line, simply reacting is not enough—we need a plan. And when that plan needs to protect information technology infrastructure, we need strategic policy development. That’s why we need you, a security and policy specialist with the skills to analyze the policies that determine our cyber resilience. As a Cyber Policy Writer on our team, you’ll assess the client’s current cyber policies and artifacts, the coverage of policies and procedures, and areas of gaps or risks. You’ll audit how policies stack up to Enterprise Mission Assurance Support Service (eMASS) controls and assessment procedures, STIG security vulnerabilities, and Risk Management Framework and NIST policies. You’ll work with the client to help them document secure operations as they navigate an evolving IT environment. Work with us as we protect the client’s IT infrastructure through strategic cyber policy development. Join us. The world can’t wait.

Requirements

5+ years of experience using Microsoft Office products, including PowerPoint, Word, Excel, Outlook, and Teams
2+ years of experience with cybersecurity or policy support
Experience translating technical concepts into policy statements
Experience working with technical subject matter experts
Knowledge of existing federal cybersecurity policies and guidance, including the NIST 800 series
Ability to analyze existing documentation and understand relationships to new policy requirements
Ability to assist with final-version policy documents, ensuring consistent style and format
Ability to conduct analysis of existing guidance and directive documentation to identify overlaps, gaps, and seams between policies and guidance and provide recommendations for revisions, updates, resolution, or rescission
Secret clearance
HS diploma or GED

Nice To Haves

Experience using Army eMASS
Experience using a STIG viewing tool such as EvalSTIG or STIGViewer
Experience using SharePoint Libraries for document repository
Ability to pay strict attention to detail
Possession of excellent organizational, analytical, and problem-solving skills
Bachelor’s degree
Cybersecurity, Information Assurance, or Information Security Certification

Responsibilities

Assess the client’s current cyber policies and artifacts
Audit how policies stack up to Enterprise Mission Assurance Support Service (eMASS) controls and assessment procedures, STIG security vulnerabilities, and Risk Management Framework and NIST policies
Work with the client to help them document secure operations as they navigate an evolving IT environment