Information Assurance Policy Analyst

Responsibilities

• Lead initiatives to modernize how the Department of War (DoW) and Defense Industrial Base (DIB) access and share classified facilities and IT systems, with a focus on Commercial Classified-Infrastructure-as-a-Service (CIaaS).
• Leverage dual-hatted experience as an Information Systems Security Manager (ISSM) and Special Security Officer/Program Security Officer (SSO/PSO) to interpret and navigate complex physical, personnel, information, and industrial security regulations.
• Develop innovative, "outside-the-box" access solutions and compliance strategies for collateral spaces, SCIFs, and SAPFs, integrating practical knowledge of ICD-705 standards alongside RMF, eMASS, and ATO processes.
• Actively drive collaboration across different agencies and mission partners by facilitating key briefings, resolving cross-domain security disputes, and advising leadership on complex infrastructure decisions.
• Translate overarching strategic concepts into practical security procedures by drafting comprehensive guidance, step-by-step facility/system Standard Operating Procedures (SOPs), and detailed decision memoranda.
• Build, coordinate, and manage formal staffing and decision packages utilizing the Correspondence and Task Management System (CATMS) to obtain official leadership signatures and approvals.
• Continually evaluate existing policy authorities to identify logistical bottlenecks, presenting structured, written recommendations to leadership and tracking overall progress via comprehensive monthly reporting.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, National Security, or a related discipline, combined with 12+ years of information assurance/ security experience.
• Documented, hands-on experience successfully executing dual responsibilities encompassing both Information Systems Security Manager (ISSM) and Special Security Officer (SSO) or Program Security Officer (PSO) functions.
• Expertise in information systems security governance, including comprehensive, practical application of the Risk Management Framework (RMF), eMASS, and the Authority to Operate (ATO) lifecycle for classified IT systems.
• Demonstrated mastery of physical, personnel, and industrial security regulations, specifically encompassing deep working knowledge of ICD-705 standards for the design, construction, accreditation, and management of SCIFs and SAPFs.
• Proficiency with DoW-level (or equivalent DoD/IC) staffing processes, including practical experience utilizing the Correspondence and Task Management System (CATMS) to build, route, track, and manage official leadership decision packages.
• Prior experience directly supporting OUSW(I&S), the Office of the Under Secretary of Defense, or equivalent Joint Staff / Intelligence Community-level security policy and governance directorates.

Qualifications

• Master’s degree in Cybersecurity Policy, Information Technology, National Security Studies, Public Administration, or a closely related discipline.
• Proven track record of authoring or significantly contributing to enterprise-level security directives, formal interagency memorandums of agreement (MOAs/MOUs), or white papers addressing cross-domain initiatives.

Benefits

At ManTech International, you’ll help protect our national security while working on innovative projects that offer opportunities for advancement.