Senior Policy Analyst

Rosslyn, VA
Dec 15, 2017
Mar 06, 2018
Full Time
The Senior Policy Analyst supports the Department of State, Diplomatic Security, Directorate of Cyber and Technology Security. The Policy and Standards Program is responsible for developing, promulgating, and maintaining Department cybersecurity policies and standards; developing and providing guidance on the Overseas Security Policy Board (OSPB) information systems security policy and standards; and providing guidance on existing policies and standards for the Department. The Program is also responsible for Department representation and coordination of National level policies and guidance. The Program handles exception requests for standards and policies within the Directorate of Cyber and Technology Security's scope of authority. Additionally, the program responds to user questions and inquiries about policy received via cables, memos, emails and phone calls.
  • Research, recommend, develop, maintain, and update domestic and overseas cybersecurity policies, to include use of new and emerging technology (e.g. Wi-Fi, cloud, mobile devices), software, hardware, and other IT-related systems (e.g. VoIP, Building Automation Systems).
  • Examine incoming requests for exceptions to policy and draft recommended decision memoranda to include requisite mitigation strategies
  • Coordinate clearances of all draft cybersecurity policies and memoranda with DoS stakeholders
  • Participate in intra-agency policy working groups and provide cybersecurity policy subject matter expertise
  • Provide support for the review and coordination for national level classified and unclassified cyber and communications security policies and guidelines
  • Respond to cables, memos, emails and phone inquiries regarding security policies and standards
  • Help maintain the contents of the Frequently Asked Questions (FAQ) web page and web portal website
  • Maintain databases for tracking incoming and outgoing policy documents, policy inquiries, exception requests
  • Provide status reports as required. Prepare contract deliverables to include trend analysis reports, quarterly status reports, and others
  • Bachelor's degree in IT or related field with 5+ years of work experience or MA in the same fields combined with 3+ years of work experience
  • Demonstrated experience in researching, developing, writing, and editing cybersecurity policies, best practices, standards, processes and procedures
  • Experience in research and analysis of information system issues and trends, and research and development in a technical discipline/field
  • Excellent written and verbal communication skills; strong organizational skills; research, analysis, and writing skills
  • Strong customer service and interpersonal skills to effectively relate to agency and customer needs; ability to build working relationships with leaders and key stakeholders
  • Proficiency with Microsoft Office
  • Experience with the creation of IT security requirements, technical security safeguards, countermeasures, risk management, contingency planning, and data communications networking
  • Ability to work independently and as part of a team; ability to take initiative with minimal direction and to solve problems
  • Knowledge of, and experience with, current Federal security standards (e.g., FISMA/NIST, DOD, and CNSS)
  • Familiarity with the Department of State's mission is preferred and work with global policies is preferred
  • CISSP is preferred

Similar jobs