Cybersecurity Policy Analyst & Governance Specialist

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, or related field; students within six months of graduation may apply. Equivalent combination of education and relevant experience will be considered.
• Professional certifications such as CISM or CISA are highly preferred. Entry-level cybersecurity certifications are valued, including:
  • ISC2 Certified in Cybersecurity (CC)
  • CompTIA Security+
  • CompTIA Cybersecurity Analyst+ (CySA+)
• Minimum 5 years of direct experience in Cybersecurity Policy Development and Authoring (incumbent must be able to contribute immediately with zero training).
• Deep, practical knowledge of NIST 800-53, NIST CSF, and ISO/IEC 27001 is preferred.
• Advanced communication and negotiation skills: proven ability to lead meetings with high-level executives, explain technical risks to non-technical audiences, and negotiate policy language with legal/labor stakeholders.
• Strong analytical thinking, problem-solving abilities, and attention to detail.
• Proven "self-starter" with the ability to manage the policy lifecycle from research to final approval without daily supervision.

Schedule

This role follows a hybrid work model, requiring availability for in-person work at City Hall East or the Integrated Security Operations Center. Immediate availability is preferred.