Cybersecurity Analyst

Minimum Qualifications:

• Bachelor''s degree in cybersecurity, information technology, computer science, or related field; students within six months of graduation may apply. Equivalent combination of education and relevant experience will be considered.
• Bachelor''s degree in a related field; professional certifications such as CISM or CISA are highly preferred. Also, entry-level cybersecurity certifications are valued, such as:
• ISC² Certified in Cybersecurity (CC)
• CompTIA Security+
• CompTIA Cybersecurity Analyst+ (CySA+)
• Minimum 5 years of direct experience in Cybersecurity Policy Development and Authoring. (Incumbent must be able to contribute immediately with zero training).
• Deep, practical knowledge of NIST 800-53, NIST CSF, and ISO/IEC 27001 is preferred.
• Advanced Communication & Negotiation Skills: Proven ability to lead meetings with high-level executives, explain technical risks to non-technical audiences, and negotiate policy language with legal/labor stakeholders.
• Strong analytical thinking, problem-solving abilities, and attention to detail.
• Proven "self-starter" with the ability to manage the policy lifecycle from research to final approval without daily supervision. 

Deliverables:

• Policy Gap Analysis Report: A formal assessment of current policy deficiencies compared to NIST CSF 2.0.
• Modernized Citywide Information Security Policy: A finalized, ready-for-adoption Information Security Policy.
• Policy Interpretation Guide: A simplified "FAQ" or handbook for Departmental ISOs to help them implement the new policies.
• Governance Desk Manual: A guide for ITA staff on how to maintain, review, and update these policies in the future.
• Monthly Progress & Engagement Logs: Documentation of all stakeholder interviews and follow-ups conducted to prove active project advancement.