Senior Security Governance and Policy Analyst

Concurrent Technologies Corporation•DC Metro Area, DC

2d•Onsite

About The Position

Concurrent Technologies Corporation (CTC) is seeking an experienced Senior Security Governance and Policy Analyst to provide expert cybersecurity governance, policy, and compliance support for a federal customer. The selected candidate will serve as a senior advisor responsible for developing, implementing, and maintaining enterprise cybersecurity policies, governance frameworks, and security standards that align with federal regulations and intelligence community requirements. This individual will collaborate with executive leadership, cybersecurity teams, system owners, and stakeholders to ensure security policies effectively protect critical systems operating in both cloud and on-premises environments. The ideal candidate possesses extensive experience supporting Federal Government, Department of Homeland Security (DHS), and Intelligence Community (IC) cybersecurity initiatives while ensuring compliance with evolving federal cybersecurity mandates.

Requirements

Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related technical discipline (or equivalent experience).
Minimum 10 years of progressive cybersecurity experience.
Demonstrated experience supporting Federal Government, Department of Homeland Security (DHS), and Intelligence Community (IC) cybersecurity programs.
Extensive knowledge of cybersecurity governance, policy development, risk management, and federal compliance requirements.
Experience supporting both cloud and on-premises enterprise environments.
Strong understanding of: NIST Cybersecurity Framework (CSF), NIST Special Publications (800 Series), Risk Management Framework (RMF), FISMA, CNSS Policies, Intelligence Community Directives (ICDs), Zero Trust Architecture.
Excellent analytical, technical writing, and communication skills.
Ability to interact effectively with executive leadership and technical teams.
Active TS/SCI clearance with FRD, RD, and NATO access.

Nice To Haves

Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Experience supporting classified government environments.
Familiarity with enterprise governance, compliance, and cybersecurity risk management tools.
Experience supporting large-scale federal cybersecurity modernization initiatives.

Responsibilities

Develop, review, and maintain enterprise cybersecurity governance frameworks, policies, standards, and procedures.
Interpret and implement federal cybersecurity directives, executive orders, DHS guidance, and Intelligence Community security policies.
Advise leadership on cybersecurity governance strategies, risk management, and regulatory compliance.
Ensure cybersecurity policies align with NIST, FISMA, RMF, CNSS, ICD, and other applicable federal standards.
Support governance activities for both cloud-based and on-premises information systems.
Evaluate existing security policies and recommend improvements to strengthen organizational cybersecurity posture.
Coordinate with cybersecurity engineering, compliance, and operations teams to ensure policy implementation across enterprise environments.
Conduct policy gap analyses and develop remediation strategies.
Support audits, inspections, assessments, and compliance reviews.
Prepare executive-level reports, policy documentation, and governance briefings.
Provide subject matter expertise during security authorization activities and enterprise cybersecurity initiatives.
Mentor junior analysts and provide technical guidance on governance and policy best practices.