Cybersecurity Policy Analyst

Goldbelt, Inc. • Columbus, OH

2d

About The Position

The Cybersecurity Policy Analyst reviews, consolidates, and develops with government approval cybersecurity policy in accordance with requirements. Provides technical support and assistance to programs and assesses IT policies, standards, guidelines, or procedures to ensure a balance of security and operational requirements. Briefs senior management on cybersecurity policy changes, updates, and progress.

Requirements

• Seven (7) years of relevant cybersecurity policy experience
• Experienced in the general tenets supporting the overall DOD implementation of its cybersecurity policies, procedures, and process.
• DOD TOP SECRET Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5).
• Any team member of CERT will maintain CSSP Analyst certification.

Nice To Haves

• Bachelor’s degree in a related field.

Responsibilities

• Provide technical support in the review, analysis, development, and maintenance of CSSP and Incident Response processes, policies, and procedures for the DLA enterprise.
• Support the planning and conducting of annual cybersecurity exercises, such as tabletop exercises (TTX) for both IT and OT enterprise programs and applications. Develop comprehensive exercise scoping documents, final reports, and debrief slides outlining lessons learned.
• Track and validate compliance with DoD, DCDC, and DLA requirements, including long-term, recurring cyber defense directives.
• Assist DLA staff in preparation for CSSP evaluations and compliance with established metrics.
• Support DLA CERT's annual CSSP self-assessment effort, as well as other external inspections and audits, by obtaining, compiling, and archiving CSSP artifacts and inspection metrics.
• Conduct a continuous review of DLA Cybersecurity SOPs and TTPs annually to ensure alignment with updated DoD and DCDC policies, recommending and implementing improvements.
• Prepare training materials to assist in the transition of procedures and policies for Incident Handling and Analysis to government system administrators, IA personnel, ISSMs, and incident response teams.

Benefits

• medical, dental, and vision insurance
• a 401(k) plan with company matching
• tax-deferred savings options
• supplementary benefits
• paid time off
• professional development opportunities

What This Job Offers

• Job Type: Full-time
• Career Level: Senior