Cybersecurity Policy Analyst
On-siteColumbus, Ohio, United States
Job Summary
Develop, review, maintain, and update cybersecurity policies, SOPs, TTPs, and operational guidance supporting DLA Enterprise Cyber Security Service Provider (CSSP) operations and Incident Response activities. Ensure documentation complies with DoD, DLA, NIST, RMF, and applicable directives while preparing artifacts for CSSP assessments, inspections, and audits. Plan and support cybersecurity tabletop exercises, develop After Action Reports, and deliver training on Incident Response policies and compliance requirements. Collaborate with engineering and government leadership to implement policy updates and improve enterprise cybersecurity processes. Requires Top Secret clearance with SCI eligibility and seven years of experience in a DoD or Federal environment.
Required Qualifications
- Top Secret security clearance with SCI eligibility
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related technical discipline
- Seven (7) or more years of experience supporting cybersecurity policy, governance, compliance, security operations, or Incident Response programs within a DoD or Federal environment
- Experience developing and maintaining cybersecurity policies, SOPs, TTPs, technical documentation, or operational procedures
- Knowledge of DoD cybersecurity policies, Risk Management Framework (RMF), NIST guidance, and cybersecurity compliance requirements
- Experience supporting cybersecurity compliance activities, inspections, audits, or assessment programs
- Strong technical writing, documentation, analytical, and presentation skills
- Ability to communicate effectively with technical teams, cybersecurity leadership, and government stakeholders
Desired Qualifications
- Experience supporting the Defense Logistics Agency (DLA), DISA, or other DoD organizations
- Experience supporting Cyber Security Service Provider (CSSP) operations or assessments
- Knowledge of NIST SP 800-53, NIST SP 800-61, DoDI 8500.01, DoDI 8510.01 (RMF), DISA STIGs, and related cybersecurity standards
- Experience preparing RMF documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and other authorization artifacts
- Experience planning or supporting cybersecurity exercises and developing After Action Reports (AARs)
- Experience developing and delivering cybersecurity training, briefings, or awareness materials
- Professional cybersecurity certifications such as Security+, CySA+, CASP+, CISSP, CISM, GSLC, or equivalent
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.