Cyber Policy and Strategic Planner develops and maintains cybersecurity plans, strategy, and policy to support and align with research and development and cybersecurity initiatives.
Core responsibilities include:
• Develop policy, procedures, and guidelines for implementation.
• Establish and maintain communication channels with stakeholders.
• Review existing and proposed policies with stakeholders.
• Serve on organizational, agency, and interagency policy boards.
• Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.
• Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization's mission, vision, and goals.
• Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
• Analyze organizational cybersecurity policy.
• Assess policy needs and collaborate with stakeholders to develop policies to govern cybersecurity activities.
• Define and integrate current and future mission environments.
• Assist with the design/integration of a cybersecurity strategy that outlines the vision, mission, and goals that align with the organization's strategic plan.
• Draft and publish cyber policy.
• Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services.
• Seek consensus on proposed policy changes from stakeholders, as appropriate.
• Provide policy guidance to cyber management, staff, and users.
• Review, conduct, or participate in audits of cybersecurity programs and projects.
• Support the CSO in the formulation of cybersecurity-related policies.
• Write instructional materials (e.g., standard operating procedures, production manual) to provide detailed guidance to relevant portion of the workforce.
Required Skills:
• BS degree in Computer Science, Information Technology, Computer Information Systems, Political Science, Business Management, Public Administration with cybersecurity experience or related field required with a minimum of seven (7) years of cybersecurity or similar IT work experience.
• Skilled in administrative planning activities, to include preparation of functional and specific support plans, preparing and managing correspondence, and staffing procedures.
• Experienced in preparing plans and related correspondence.
• Ability to determine the validity of technology trend data.
• Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.
• Ability to leverage best practices and lessons learned of external organizations and academic institutions dealing with cyber issues.
• Demonstrable experience communicating complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.