Cybersecurity Policy / IA Program Analyst

THOR Solutions, LLC•Washington, DC

1d•$76,000 - $106,000•Onsite

About The Position

THOR Solutions is seeking a Cybersecurity Policy / IA Program Analyst to support a DHS information technology support services program focused on cybersecurity governance, assessment and authorization (A&A), and information assurance program support in Washington, DC. This position develops and updates cybersecurity policies, tracking tools, user and operator training guides, and process guides that support information assurance governance in accordance with established DHS, federal, and Department of Defense cybersecurity policies. The analyst collaborates with government stakeholders to develop supporting documentation—including memoranda, process guides, interconnection security agreements, and memoranda of understanding—and maintains stakeholder-facing portal content derived from applicable policies. The position also supports the development and management of centralized training tracking and assists Information System Security Officers with the review and update of system management guides, policy development, and Standard Operating Procedures required for accreditation. Through these efforts, the analyst strengthens the cybersecurity policy framework and process maturity that enable compliant, well-governed information assurance operations.

Requirements

Bachelors degree in cybersecurity, information systems, information assurance, or a related discipline.
At least four (4) years of information assurance experience with emphasis on cybersecurity policy development, training guide and process guide development, and governance documentation.
Experience collaborating with government stakeholders to produce policy, process, and agreement documentation and supporting accreditation-related SOPs and management guides.
Must possess active/current certifications to qualify as both DoD 8570/8140 IAT Level 2 and IAM Level 2.
DoD 8570/8140 IAT Level 2 (required for systems assessment and authorization work), fulfilled by possessing ONE of the following: CompTIA Cybersecurity Analyst (CySA+), CompTIA Security+ CE (Sec+ CE), EC-Council Certified Network Defense (CND) v3, Red Hat Certified System Administrator (RHCSA), CCNA Security, Global Industrial Cyber Security Professional (GICSP), GIAC Security Essentials (GSEC), Systems Security Certified Practitioner (SSCP), CompTIA Advanced Security Practitioner (CASP), Cisco Certified Network Prof. Security (CCNP Security), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH).
DoD 8570/8140 IAM Level 2 (required for IA program support work), fulfilled by possessing ONE of the following: CompTIA Advanced Security Practitioner (CASP), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Chief Information Security Officer (C-CISO), HealthCare Info. Security and Privacy Practitioner (HCISPP), Red Hat Certified System Administrator (RHCSA), Certified Authorization Professional (CAP), GIAC Security Leadership (GSLC), Certified Information Security Manager (CISM), Certified Chief Information Security Officer (C-CISO), GIAC Security Leadership (GSLC).
Proficiency in Microsoft Office suite and SharePoint.
Knowledge of data governance and data framework compliance.
Strong organizational and communication skills.
Existing TOP SECRET/SCI Security Clearance Required.
Only U.S. citizens are eligible for a security clearance; therefore, only current U.S. citizens will be considered for this position.

Responsibilities

Develop and update cybersecurity policies, tracking tools, user and operator training guides, and process guides that support information assurance governance in accordance with established DHS, federal, and DoD cybersecurity policies.
Collaborate with multiple government stakeholders to develop documentation including memoranda, process guides, Interconnection Security Agreements (ISAs), and Memoranda of Understanding (MOU).
Develop and update portal/webpage content with relevant stakeholder information derived from DoD, federal, and agency policies to support cybersecurity operations.
Support development and management of a centralized training tracking system.
Assist Information System Security Officers (ISSOs) with the review and update of information system management guides, policy development, and Standard Operating Procedures (SOPs) required for accreditation.
Develop training briefs and process documentation supporting cybersecurity governance, standards, and compliance.
Support standardization of cybersecurity processes and templates across the organization.