Technical Documentation Contractor

About the role

Diversified Systems is searching for a Technical Documentation Contractor to develop, revise, and maintain information security governance documentation. The contractor will create technically accurate, enforceable documentation aligned with cybersecurity frameworks and organizational objectives.

Responsibilities

• Develop and revise information security policies.
• Develop technical standards supporting approved security policies.
• Develop operational procedures and implementation guidance.
• Create security baselines and configuration documentation.
• Develop compliance documentation for technical accuracy, consistency, completeness, and enforceability.
• Recommend improvements to governance documentation structure and organization.
• Produce clear documentation suitable for technical staff, management, auditors, and external reviewers.
• Work with subject matter experts to accurately document existing processes and required controls.
• Maintain document version control and support periodic review.

Requirements

• Technical writing experience involving cybersecurity or IT governance required.
• Demonstrated experience with NIST Cybersecurity Framework required.
• Demonstrated experience with NIST SP 800-53 required.
• Demonstrated experience with IRS Publication 1075 required.
• Demonstrated experience with CIS Critical Security Controls required.
• Demonstrated experience with security governance and risk management required.
• Demonstrated experience with Identity and Access Management required.
• Demonstrated experience with Incident Response required.
• Demonstrated experience with Vulnerability Management required.
• Demonstrated experience with Disaster Recovery and Business Continuity required.
• Demonstrated experience with Vendor Risk Management required.
• Demonstrated experience with Security Awareness and Training required.
• Demonstrated experience with Policy Lifecycle Management required.

Preferred Qualifications

• Experience writing documentation aligned with NIST Cybersecurity Framework, NIST SP 800-53, and IRS Publication 1075 highly desired.
• CISSP certification highly desired.
• CISA certification highly desired.
• CGRC certification highly desired.
• Security+ certification highly desired.
• Equivalent cybersecurity certifications highly desired.