Policy Analyst

Responsibilities

• Lead the development, review, and coordination of corporate, IT service, and cybersecurity/information assurance policies to ensure enterprise-wide alignment.
• Direct the creation of SME self-inspection checklists to facilitate rigorous monitoring, implementation tracking, and regulatory adherence.
• Lead specialized SME analysis to identify policy gaps, conducting deep-dive assessments to drive data-informed revisions and updates.
• Execute IV&V protocols to ensure all policy issuances are fact-based, accurate, and consistent with strategic planning and external mandates.
• Manage the tracking and reporting of policy-related metrics and business analytics to measure the effectiveness of governance initiatives.
• Align internal policy frameworks with the organization’s overarching Cybersecurity Strategy to fortify information assurance.
• Analyze internal documentation and external issuances—including Executive Orders and IC/DoD policies—to proactively mitigate conflicts and address emerging impacts.

Requirements

• 7+ years of demonstrated experience leading, managing, and working policies in accordance with a Policy Life Cycle Management (PLCM) process.
• Bachelor’s Degree in Computer Science, Systems Engineering, Cybersecurity, International Affairs, Policy, or a related field. In lieu of a degree, 10+ years of experience is required.
• 2+ years of demonstrated experience tracking and managing formal taskers.
• 2+ years of demonstrated experience in coordinating and collaborating on agency-level support agreements.
• 2+ years of demonstrated experience reviewing and analyzing high-level governance documents (e.g., agency directives, statutes, Executive Orders).
• Demonstrated understanding of NIST 800-53 controls, cybersecurity frameworks, and high-level cybersecurity policy.
• Proven expertise in policy lifecycle management, including the orchestration of strategic agendas, the maintenance of policy compendiums, and the resolution of regulatory gaps and rescissions.

Qualifications

Minimum qualifications include:

• A current/active TS/SCI security clearance and ability to obtain a polygraph.
• The person in this position must be able to remain in a stationary position 50% of the time.
• Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.