Cybersecurity Technical Writer Associate Director
Hybrid Jersey City or Dallas or Tampa
6-12 Months Contract to Hire
INTERVIEW TYPE 2 Rounds
Required qualifications
The ideal candidate will have:
7+ years of professional experience writing policies, standards, procedures or technical documentation, with at least 3 years in cybersecurity, IT risk or a regulated financial services environment.
Proven experience setting up and running a document governance program, including templates, document hierarchy, review cycles, version control and approval workflows.
Position Requirements
Write, update and maintain Cyber Security Operations policies and standards, and align them with DTCC enterprise policy and the applicable regulatory and industry frameworks.
Write step-by-step procedures, SOPs, runbooks and playbooks for operational activities. Examples include rules of engagement, testing workflows, escalation paths and handoffs between teams.
Design job aids that support consistent execution and onboarding, such as quick-reference guides, checklists, decision trees, process flows and how-to guides.
Set up and enforce a documentation hierarchy so policies, standards, procedures and job aids are clearly separated and traceable to each other.
Own document lifecycle governance: templates, naming conventions, document ownership, version control, scheduled reviews (at least annually), approvals, exceptions and retirement.
Interview subject matter experts and observe workflows to document how work is actually done, then find gaps, inconsistencies and outdated practices.
Map documentation to control requirements. Support internal audit, regulatory examination and evidence requests with complete, traceable materials.
Run gap analyses when policies, regulations, tools or organizational structures change, and update affected documents promptly.
Manage the documentation within the firm s document repository.
Create and maintain a Cyber Security Operations style guide and glossary so terminology and formatting stay consistent.
Help with training and communications when new or changed documents are rolled out.
Use approved AI tools responsibly to speed up drafting and review, while keeping human validation, accuracy and confidentiality in place.
Work Description
Maintain the Cyber Security Operations documentation library and its review schedule.
Coordinate drafting, SME review, stakeholder feedback and formal approval for each document.
Track document status, review dates and outstanding updates.
Report documentation health and compliance metrics to leadership.
Document all work according to DTCC Information Security Policies, records management requirements and Cyber Security Operations governance standards.
Skills Description
Exceptional writing, editing and information-design skills, with the ability to produce clear, concise and unambiguous directive language.
A clear understanding of how a policy, a standard, a procedure, a guideline and a job aid differ, and when to use each one.
Working knowledge of cybersecurity operations concepts, including penetration testing, red teaming, threat hunting, insider risk, incident response and vulnerability management.
Familiarity with NIST SP 800-53, the NIST CSF, MITRE ATT&CK, ISO 27001 and financial services regulatory expectations such as FFIEC and SEC requirements.
Experience with process mapping and visual documentation using tools such as Visio, Lucidchart or similar.
Advanced skill in Microsoft Office (Word, Excel, PowerPoint, Outlook) and SharePoint, including lists, metadata and version control.
Strong attention to detail, careful handling of sensitive information, and the ability to manage several documents at once.
Ability to influence and work with technical subject matter experts at all levels.
Qualifications
Bachelor's degree in English, Communications, Technical Writing, Information Security or a related field, or the equivalent combination of education, training and work experience.
7+ years of experience developing policies, standards, procedures or technical documentation.
3+ years supporting cybersecurity, IT security, IT risk or compliance functions.
Preferred certifications include CompTIA Security+, CISSP, CISA, CRISC, or a technical communication credential such as CPTC
