Posted 2 weeks ago
Top Secret
Unspecified
Unspecified
Tysons, VA (On-Site/Office)
OVERVIEW:
Policy Reviewers play a pivotal role in evaluating the cybersecurity posture of enterprise environments across the Intelligence Community (IC). They conduct comprehensive policy assessments and perform detailed analysis to ensure compliance with Intelligence Community Directives (ICDs), Security Requirement Guides (SRGs), and NIST 800-53 rev 5 security controls.
GENERAL DUTIES:
REQUIRED QUALIFICATIONS:
CLEARANCE:
Policy Reviewers play a pivotal role in evaluating the cybersecurity posture of enterprise environments across the Intelligence Community (IC). They conduct comprehensive policy assessments and perform detailed analysis to ensure compliance with Intelligence Community Directives (ICDs), Security Requirement Guides (SRGs), and NIST 800-53 rev 5 security controls.
GENERAL DUTIES:
- Leverage their extensive IC policy requirements to perform independent review and assessment of Policy Compliance in support of JCIP Inspections.
- Interact with leadership and site technical staff before conducting inspections.
- Interview organizational subject matter experts in conducting IC policy checklists.
- Collect data in support of reviewing a comprehensive Threat Informed Critical Controls List (TICCL) and provide written input on the data.
- Prepare assessment deliverables.
- Communicate finding impacts through presentations and written deliverables.
- Stay up to date with the latest trends and technologies related to IC policy to continuously refine security inspection protocols.
- Participate in inspection planning, execution, and reporting processes.
- Travel as required to support onsite inspections across various IC locations. (8-12 weeks of travel avg, some international and passport required).
REQUIRED QUALIFICATIONS:
- Possess a master's degree, with 8+ years of total experience/equivalent certifications. Master's degree may be substituted with a bachelor's degree and 5+ years of additional experience/equivalent certifications, for a total of 13+ years.
- Knowledge:
- Experience in IC policy assessments
- Skills:
- Solid interpersonal and communication skills to interact with various stakeholders and team members effectively.
- Abilities:
- Some experience leading security projects and initiatives.
- Team-player with collaboration qualities and experience working in mixed technical teams.
- Certifications:
- Obtain an IAT-III or Maintain IAT Level III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management.
- CASP+ CE
- CCNP Security
- CISA
- CISSP (or Associate)
- GCED
- GCIH
- CCSP
CLEARANCE:
- Top Secret minimum
group id: 90943786
