Cybersecurity Policy Analyst - 100% Remote

NOTES:

Cybersecurity Policy Analyst

• Phishing would be a Plus.
• Cyber Security Policy Writer or Security/Cybersecurity Technical Writer.
• 1 round of interview.
• 85% to 90% on Technical Writing (Policy Writing).
• Understanding of Cyber (little bit) with heavy technical writing required.

Duties:

Policy Analysis & Mapping

• Review and map existing policies to ensure alignment with the Common Control Framework (CCF), traceability matrix, and organization standards.
• Identify gaps for current policies and build a repeatable process for new policies that will meet regulatory and business requirements.
• Collaborate with stakeholders to gather, document, and validate policy requirements while challenging accuracy and validity of policy statement.
• Support change management processes for policy and standard updates.

Skills:

Technical Writing & Communication

• Draft clear, digestible policies and standards that are accessible to both technical and non-technical audiences.
• Translate complex cybersecurity concepts into easily understandable language for various audiences.
• Create and maintain cybersecurity knowledge articles and documentation.
• Partner with security teams to ensure accuracy and consistency in cyber technical content.
• Strong understanding of cybersecurity regulations and frameworks such as NIST 800-53 and NIST CSF,

Skills

• Policy & Standards Expertise: Strong understanding of cybersecurity frameworks and policy lifecycle management.
• Communication: Excellent written and verbal communication skills, with the ability to simplify technical language.
• Analytical Thinking: Ability to assess policy gaps and align documentation with strategic goals.
• Detail-Oriented: High accuracy in documentation, policy mapping, gap analysis.
• Problem-Solving: Ability to identify problems and develop effective solutions.