Senior Security Governance & Policy Analyst

OneZero Solutions•Washington, DC

3d•Onsite

About The Position

Serves as the principal advisor on cybersecurity governance, policy, and compliance, translating Federal, DHS, and IC guidance into implementable frameworks. The SG&P SME will coordinate daily with CSD leadership and functional team leads across the organization relative to security governance and policy; Artificial Intelligence (AI), Zero Trust and cloud migration security policy initiatives supporting cloud service providers. The SG&P SME is responsible for information security governance of traditional datacenters, cloud platform-based systems and AI Large Language Model (LLM) governance.

Requirements

Bachelor's degree in a computer related field or a minimum of 14 years equivalent job experience working in an enterprise infrastructure security and governance role.
Minimum of 10 years of technical policy experience.
Experience working in classified or DHS/IC environments.
Top Secret/SCI clearance.

Nice To Haves

Master's degree preferred.
Experience with Amazon Web Services (AWS) is preferred.
CISSP certification.
CISM certification.

Responsibilities

Develop, review, and update cybersecurity policies, procedures, governance artifacts, and implementation guidance.
Analyze and interpret Federal, DHS, IC, NIST, CNSSI, and DHS 4300A cybersecurity policies, directives, and standards.
Review, analyze and manage Intelligence Community (IC) Directives (ICDs) and Intelligence Community Standards (ICSs); provide internal liaison support across functional areas, provide external liaison support to intelligence community risk management committee.
Experience developing policies related to cloud service providers, experience with Amazon Web Services (AWS) is preferred.
Develop overarching CSD AI policy in accordance with the NIST AI policy framework.
Provide policy related guidance to leadership and functional team leads to support Risk Management Framework (RMF) tasks and activities.
Support metrics and reporting to assess governance, policy, training, and compliance effectiveness.
Coordinate with stakeholders and facilitate governance forums, including the CISO Forum, to align policies across DHS IE components.