Senior Cybersecurity Governance & Policy Specialist — Level III

About the role

RiVidium Inc. is seeking an experienced Senior Cybersecurity Governance & Policy Specialist - Level III to serve the team for all Cybersecurity and Intelligence Enterprise Information Technology Services (CIEITS) program activities. The Senior Cybersecurity Governance & Policy Specialist - Level III serves as the principal cybersecurity governance and policy advisor supporting the Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE) Chief Information Security Officer (CISO).

Responsibilities

• Serve as the principal Cybersecurity Governance and Policy Advisor to the DHS Intelligence Enterprise Chief Information Security Officer (CISO).
• Develop, maintain, and update enterprise-wide cybersecurity policies, standards, procedures, and governance frameworks supporting DHS Intelligence Enterprise operations.
• Analyze and interpret Federal laws, Executive Orders, National Security Memoranda (NSMs), Office of Management and Budget (OMB) guidance, DHS directives, Intelligence Community Directives (ICDs), and cybersecurity standards to ensure organizational compliance.
• Develop cybersecurity governance guidance aligned with:
  • NIST Risk Management Framework (RMF)
  • NIST SP 800-53
  • CNSSI 1253
  • ICD 503
  • DHS Sensitive Systems Policy Directive 4300
  • CNSTI AI Risk Management Framework (AI RMF)
  • Classified Supply Chain Risk Management (C-SCRM) guidance
• Identify requirements for updates to the DHS 4300C Instruction Manual, Security Common Controls Catalog, Supply Chain Risk Management (SCRM) policies, and related governance documentation.
• Coordinate policy implementation activities with Governance, Risk, and Compliance (GRC) administrators and cybersecurity engineering teams.
• Research newly issued Executive Orders, Intelligence Community policies, National Security Memoranda, and other cybersecurity directives; prepare implementation guidance and compliance recommendations for DHS leadership.
• Develop cybersecurity governance strategies supporting emerging technologies, including Zero Trust Architecture (ZTA), Artificial Intelligence (AI), Machine Learning (ML), cloud security, and cybersecurity modernization initiatives.
• Prepare responses, supporting documentation, and corrective action plans for:
  • Federal Information Security Modernization Act (FISMA) audits
  • Office of Inspector General (OIG) audits
  • Joint Compliance Inspection Program (JCIP) reviews
  • Intelligence Community oversight activities
• Develop executive-level communications, policy memoranda, briefing papers, white papers, reports, and PowerPoint presentations for the CISO, senior executives, and DHS Intelligence Enterprise leadership.
• Present cybersecurity governance updates during executive leadership meetings, Intelligence Community Oversight Program (ICOP) sessions, governance boards, and cybersecurity working groups.
• Monitor cybersecurity policy compliance across DHS Intelligence Enterprise Components and prepare compliance status reports, metrics, and executive dashboards.
• Manage and maintain cybersecurity governance content on A-LAN and C-LAN SharePoint portals, ensuring policies, standards, guidance, and reference materials remain current.
• Manage centralized governance calendars, working group schedules, action item trackers, and policy repositories.
• Represent DHS Intelligence Enterprise in Intelligence Community cybersecurity governance working groups, interagency meetings, and collaborative policy initiatives.
• Provide mentorship and technical guidance to junior governance analysts and cybersecurity policy specialists.

Qualifications

• Minimum 10 years of progressively responsible experience in cybersecurity governance, policy development, information assurance, or cybersecurity compliance supporting Federal Government or Intelligence Community programs.
• Demonstrated expertise in:
  • Cybersecurity governance
  • Policy development
  • Regulatory compliance
  • Information assurance
  • Risk Management Framework (RMF)
  • Security policy implementation
• Expert knowledge of:
  • NIST SP 800-53
  • NIST Risk Management Framework (RMF)
  • CNSSI 1253
  • ICD 503
  • DHS Sensitive Systems Policy Directive 4300
  • CNSTI AI Risk Management Framework (AI RMF)
  • Classified Supply Chain Risk Management (C-SCRM) guidance
• Current Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
• Certified Authorization Professional (CAP) certification.
• Experience supporting DHS Intelligence & Analysis (I&A) or other Intelligence Community cybersecurity organizations.
• Experience supporting Federal Information Security Modernization Act (FISMA) audits, Office of Inspector General (OIG) reviews, and Joint Compliance Inspection Program (JCIP) assessments.
• Experience with Governance, Risk, and Compliance (GRC) platforms such as RSA Archer.
• Experience supporting cybersecurity governance initiatives involving Zero Trust Architecture (ZTA), Artificial Intelligence (AI), cloud security, and Supply Chain Risk Management (SCRM).
• Experience managing SharePoint collaboration sites and enterprise governance repositories.
• The following current certification is required: Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
• Preferred Certification: Certified Authorization Professional (CAP).

Required Certifications

• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).

About the Organization

RiVidium, Inc. (dba TripleCyber) is a VA-Verified SDVOSB and an SBA-Certified 8(a) company. Established in 2008, RiVidium keeps pace and surpasses its competitors by meeting challenges of advancements in Logistics, Human Capital, Cyber, Intelligence & Technology.

EEO Statement

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.