fleet management systems specialist Jobs in Washington

fleet management systems specialist

information technology specialist Jobs in Washington

information technology specialist

information technology specialist (help desk) Jobs in Washington

information technology specialist (help desk)

information technology specialist (infosec) Jobs in Washington

information technology specialist (infosec)

information technology specialist (litigation technology) Jobs in Washington

information technology specialist (litigation technology)

cybersecurity specialist

Aretum

<div><p>Aretum is a mission-driven organization committed to delivering innovative, technology-enabled solutions to our customers across defense, civilian, and homeland security sectors. Our teams work at the intersection of strategy, technology, and transformation, helping agencies solve their most critical challenges. We believe in investing in our people and creating a culture where collaboration, inclusion, and professional growth are at the forefront.<br>
<br>
Join us to be part of meaningful work that drives national impact and grow your career alongside exceptional peers.</p><p></p><p>
Due to the nature of our work as a federal consulting organization, employees may be expected to handle Controlled Unclassified Information (CUI) and must adhere to applicable safeguarding and compliance requirements. Additionally, all team members may be called upon to support proposal efforts as needed. This could include resume formatting, providing skills alignment summaries, participating in meetings, or contributing to solutioning activities based on subject matter expertise or functional experience.</p><p></p><p>
Responsibilities</p><ul>
<li>Lead authorship of the System Security Plan from first draft to approval, written in clear, testable language that supports an ATO decision.</li>
<li>Perform security categorization under FIPS 199 and derive baseline requirements from FIPS 200 and NIST SP 800-53 Rev 5 with appropriate tailoring.</li>
<li>Build a complete and coherent authorization package that explains the system boundary, users, data types and flows, risks, and how controls are met.</li>
<li>Translate technical inputs into specific control narratives that can be verified by assessors and traced to actual configurations.</li>
<li>Collect, verify, and index evidence for every control, linking statements to diagrams, configurations, tickets, and scan results.
</li><li>Record, organize, and quality-check all artifacts in CSAM with consistent naming, metadata, and cross-references ready for audit.</li>
<li>Keep documentation current as the system changes by capturing deltas promptly and updating only the affected sections.</li>
<li>Plan and run readiness reviews before assessments, close gaps, and prepare concise responses to findings.</li>
<li>Manage POA&amp;M items through closure with clear actions, owners, and target dates.</li>
<li>Create and maintain templates and checklists that reduce review time and improve consistency across systems.</li>
<li>Coordinate with the ISSO, assessors, the Authorizing Official, engineers, and vendors to keep schedules and deliverables on track.</li>
<li>When cloud services are used, align with applicable FedRAMP baselines and document inherited controls clearly.</li>
<li>Communicate risks and decisions in straightforward terms so leadership can approve with confidence and reviewers can verify quickly.</li>
</ul><p><b>Requirements</b></p><ul>
<li>3 years of experience supporting federal government compliance.</li>
<li>Demonstrated experience producing federal FISMA RMF authorization documentation that resulted in an ATO or successful assessments.</li>
<li>Strong track record authoring SSP and POA&amp;M with precise control statements and accurate mapping to evidence.</li>
<li>Working knowledge of NIST SP 800-37, NIST SP 800-53 Rev 5, NIST SP 800-53A, NIST SP 800-18, NIST SP 800-30, FIPS 199, and FIPS 200.</li>
<li>Ability to elicit engineering details and turn them into assessor-ready narratives with clear boundaries and data flows.</li>
<li>Hands-on experience managing authorization packages in CSAM with disciplined organization and traceability.</li>
<li>Familiarity with common assessment evidence and scanner outputs and how they map to NIST 800-53 controls and POA&amp;M entries.</li>
<li>Clear, concise writing, strong attention to detail, version control discipline, and the ability to drive edits and approvals across teams.</li>
<li>Willing to commute to Washington, D.C. 4 days a week.</li>
<li>Eligible to obtain a Public Trust.</li>
</ul><p></p><p><b>Work Environment and Physical Requirements</b></p><p>
This is a hybrid position, with work performed both remotely and at client or corporate office locations as needed. The employee is expected to maintain a professional remote work environment with reliable internet access and the ability to participate in virtual meetings. Onsite work may involve a traditional office setting with standard office equipment and moderate noise levels. Travel to client or corporate locations will be communicated in advance.</p><p>
The physical demands described here are representative of those that must be met to successfully perform the essential functions of this job:</p><ul><li>
Prolonged periods of sitting at a desk and working on a computer.</li><li>
Frequent use of hands and fingers to operate computer equipment and communicate via phone or video.</li><li>
Ability to move about office spaces and attend in-person meetings when onsite.</li><li>
Must be able to lift up to 15 pounds at times.</li></ul><p></p><p><b>
Travel Requirements
</b></p><p>This is a hybrid position, with work performed both remotely and at designated client or corporate locations, as needed. Travel requirements may vary depending on project assignments, client meetings, or internal collaboration and will be communicated in advance whenever possible.</p><p></p><p><b>
Work Authorization</b></p><p>
Applicants must be U.S. citizens and currently authorized to work in the United States on a full-time basis. This position supports a federal government contract and requires the ability to obtain and maintain a Public Trust or Suitability Determination, depending on the agency&rsquo;s background investigation requirements. Sponsorship is not available.</p><p></p><p><b>
EEO &amp; Pay Transparency Statement</b></p><p><i>
Aretum is committed to fostering a workplace rooted in excellence, integrity, and equal opportunity for all. We adhere to merit-based hiring practices, ensuring that all employment decisions are made based on qualifications, skills, and ability to perform the job, without preference or consideration of factors unrelated to job performance.</i></p><p><i>
As an Equal Opportunity Employer, Aretum complies with all applicable federal, state, and local employment laws.</i></p><p><i>
We are proud to support our nation&rsquo;s veterans and military families, providing career opportunities that honor their service and experience.</i></p><p><i>
If you require reasonable accommodation during the hiring process due to a disability, please contact hr@aretum.com for assistance.</i><br>
<i>
</i><br>
<i>In compliance with Executive Order 13665, Aretum will not discharge or otherwise discriminate against employees or applicants for inquiring about, discussing, or disclosing their own pay or that of another employee or applicant.</i></p><p><i>
Equal Opportunity Employer/Veterans/Disabled</i></p><p></p><p><b>
Benefits</b></p><ul><li>
Health Care Plan (Medical, Dental &amp; Vision)</li><li>
Retirement Plan (401k, IRA)</li><li>
Life Insurance (Basic, Voluntary &amp; AD&amp;D)</li><li>
Paid Time Off (Vacation, Sick &amp; Public Holidays)</li><li>
Family Leave (Maternity, Paternity)</li><li>
Short Term &amp; Long-Term Disability</li><li>
Training &amp; Development</li></ul></div>

Cybersecurity Specialist

SimVentions

<div>Overview:
<div>
SimVentions is seeking a <b>Cyber Systems Analyst/Engineer</b> to support the SPEIR and LEED programs within PEO IWS 2.0 Above Water Sensors. This role provides direct support to APMs, Lead System Engineers, and Task Leads. A hybrid work environment is available, but on-site work in the DC area is required 2-3 times per week, with occasional travel (up to 10%).</div>
Travel: Travel to Washington D.C. area 2-3 times per week and additional travel up to 10% of the time (1-2 times/month). Clearance:
<div>
An<b> ACTIVE Secret Clearance</b> is required for this position. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. US Citizenship is required to obtain a clearance.</div>
Requirements:
<ul><li><b>Experience with Department of Navy (DON) RMF</b></li><li><b>
Experience with Enterprise Mission Assurance Support Service (eMASS)</b></li><li><b>
Minimum 3 years of demonstrated expertise evaluating cyber compliance of a system against current Risk Management Framework (RMF) policies including experience conducting assessments using ACAS, STIGs and SRGs</b></li><li><b>
Proficiency with MS Office suite to include MS Visio</b></li><li><b>
DoD Cybersecurity Workforce (CSWF) IAT II certification (i.e. Security + CE)</b></li><li>
At least 5 years of experience providing information assurance, system security engineering, or operational support to the DoD, including supporting information operations, cyber operations, system administration, and systems security.</li><li>
DoD Acquisition experience.</li><li>
Experience working in a Navy / US Government acquisition program office environment.</li><li>
Experience leading the development of documentation like Cybersecurity Strategies and Program Protection Plans.</li><li>
Competence in evaluating cyber compliance with DOD regulations and an understanding of the DoD Risk Management Framework / Authority to Operate (ATO) processes.</li><li>
Possess DoD 8570 Information Assurance Technical (IAT) Level II Certification or able to obtain within 6 months of hire.</li><li>
Must hold and maintain an active Department of Defense (DoD) Secret Clearance.</li><li>
Demonstrated ability to multi-task, provide high quality services and products, while meeting strict deadlines and time constraints.</li><li>
Ability to operate in a highly dynamic environment with a wide variety of programmatic/technical challenges.</li><li>
Exceptional writing and presentation abilities with strong work ethic, time management, and interpersonal skills.</li><li>
Proficiency with MS Office suite.</li><li>
Strong organizational skills with attention to detail.</li><li>
Must be energetic, thoughtful, product-oriented, dependable, flexible, open-minded individual with an eagerness to learn with demonstrated strong work ethic.</li><li>
Demonstrated forward thinking and proactive problem-solving skills.</li></ul><br>
<div></div>
Responsibilities:
<ul><li>Responsible for all aspects of the program&rsquo;s cybersecurity.
</li><li>Provide oversight and support to the program&rsquo;s to ensure Cybersecurity and Systems Security Engineering objectives are completed throughout the system acquisition lifecycle.
</li><li>Provide working level oversight, promoting, ensuring adequate cybersecurity resources are aligned and executed to program schedule.</li><li>
Support Requirements Management including the trace and allocation of cyber requirements and alignment with platform and combat systems requirements.</li><li>
Lead efforts to bring the program&rsquo;s platform information technology systems through the full life cycle of the Risk Management Framework (RMF) processes IAW (CNSSI-1253, NIST 800-37, NIST 800-53, etc.) to achieve/renew Authority to Operate (ATO).</li><li>
Author, complete and maintain the System Security Plan (SSP), Security Controls and plan of action and milestones (POA&amp;Ms) within eMASS.</li><li>
Support cyber policy implementation, artifact development, and requirements updates.</li><li>
Perform verification and validation of delivered systems; assist with the development of test plans and procedures.</li><li>
Assist with the assessment of Assured Compliance Assessment Solution (ACAS) scans &amp; Security Technical Implementation Guides (STIGs).</li><li>
Communicate risks and issues to the PEO IWS 2.0 designated Technical Area Expert (TAE) and Functional Authorizing Official.</li><li>
Handle programmatic documentation such as the Cybersecurity Strategy (CSS), inputs to Program Protection Plan (PPP), and Clinger-Cohen Act (CCA).</li><li>
Manage, draft, and maintain the Cybersecurity Strategy (CSS) and inform the programs of the appropriate measures to maintain program schedule, costs, and cyber compliance requirements.</li><li>
Provide cyber input on CDRLs, Model Drops, comment adjudications and other programmatic documentation such as the SEP and TEMP.
</li><li>Analysis of RMF controls, as well as phases in the Cyber T&amp;E guidebook including varying forms of cyber risk assessments, cyber tabletops, MBSE scans, and eventually Red Team analysis.</li><li>
Coordinate, support, and participate in Cyber Tabletop / Red Team assessments, and engineering discussions to ensure cybersecurity is being implemented appropriately across the SE CPT.</li><li>
Will support / manage Cybersecurity / System Security Engineering working group under the overarching PP / SE IPT.
</li><li>Will manage and track all associated SSE efforts, including cyber compliance, cyber engineering, program protection.</li></ul>
Preferred Skills and Experience:
<ul><li>Master&rsquo;s degree in STEM or equivalent.
</li><li>Experience with Magic Draw/Cameo, Model-Based Systems Engineering, UML/SySML</li></ul>
Education: Bachelor's degree in STEM or equivalent. Compensation:
<div>
Compensation at SimVentions is determined by a number of factors, including, but not limited to, the candidate&rsquo;s experience, education, training, security clearance, work location, skills, knowledge, and competencies, as well as alignment with our corporate compensation plan and contract specific requirements.</div><div></div><div><br>
The projected annual compensation range for this position is <b>$100,000 - $175,000</b><b> (USD)</b>. This estimate reflects the standard salary range for this position and is just one component of the total compensation package that SimVentions offers.</div>
Benefits:
<div>
At SimVentions, we&rsquo;re committed to supporting the total well-being of our employees and their families. Our benefit offerings include comprehensive health and welfare plans to serve a variety of needs.</div><div><br>
We offer:</div><br>
<div></div><ul><li>
Medical, dental, vision, and prescription drug coverage</li><li>
Employee Stock Ownership Plan (ESOP)</li><li>
Competitive 401(k) programs</li><li>
Retirement and Financial Counselors</li><li>
Health Savings and Health Reimbursement Accounts</li><li>
Flexible Spending Accounts</li><li>
Life insurance, short- &amp; long-term disability</li><li>
Continuing Education Assistance</li><li>
Paid Time Off, Paid Holidays, Paid Leave (e.g., Maternity, Paternity, Jury Duty, Bereavement, Military)</li><li>
Third Party Employee Assistance Program that offers emotional and lifestyle well-being services, to include free counseling</li><li>
Supplemental Benefit Program</li></ul>
Why Work for SimVentions?:
<div>
SimVentions is about more than just being a place to work with other growth-orientated technically exceptional experts. It&rsquo;s also a fun place to work. Our family-friendly atmosphere encourages our employee-owners to imagine, create, explore, discover, and do great things together.</div><div></div><div><b><br>
Support Our Warfighters</b></div><div></div><div><br>
SimVentions is a proud supporter of the U.S. military, and we take pride in our ability to provide relevant, game-changing solutions to our armed men and women around the world.</div><div></div><div><b><br>
Drive Customer Success</b></div><div></div><div><br>
We deliver innovative products and solutions that go beyond the expected. This means you can expect to work with a team that will allow you to grow, have a voice, and make an impact.<br>
<br>
<b>Get Involved in Giving Back</b></div><div></div><div><br>
We believe a well-rounded company starts with well-rounded employees, which is why we offer diverse service opportunities for our team throughout the year.</div><div></div><div><b><br>
Build Innovative Technology</b></div><div></div><div><br>
SimVentions takes pride in its innovative and cutting-edge technology, so you can be sure that whatever project you work on, you will be having a direct impact on our customer&rsquo;s success.</div><div></div><div><b><br>
Work with Brilliant People</b></div><div></div><div><br>
We don&rsquo;t just hire the smartest people; we seek experienced, creative individuals who are passionate about their work and thrive in our unique culture.</div><div></div><div><b><br>
Create Meaningful Solutions</b></div><div></div><div><br>
We are trusted partners with our customers and are provided challenging and meaningful requirements to help them solve.</div><div></div><div><b><br>
Employees who join SimVentions will enjoy additional perks like:</b></div><ul><li><b>
Employee Ownership:</b> Work with the best and help build YOUR company!</li><li><b>
Family focus:</b> Work for a team that recognizes the importance of family time.</li><li><b>
Culture:</b> Add to our culture of technical excellence and collaboration.</li><li><b>
Dress code:</b> Business casual, we like to be comfortable while we work.</li><li><b>
Resources:</b> Excellent facilities, tools, and training opportunities to grow in your field.</li><li><b>
Open communication:</b> Work in an environment where your voice matters.</li><li><b>
Corporate Fellowship:</b> Opportunities to participate in company sports teams and employee-led interest groups for personal and professional development.</li><li><b>
Employee Appreciation: </b>Multiple corporate events throughout the year, including Holiday Events, Company Picnic, Imagineering Day, and more.</li><li><b>
Founding Partner of the FredNats Baseball team:</b> Equitable distribution of tickets for every home game to be enjoyed by our employee-owners and their families from our private suite.</li><li><b>
Food:</b> We have a lot of food around here!</li></ul><div></div><div><br>
MWAC</div></div>

Mid/Senior Cyber Systems & Acquisition Analyst

Connsci

<div><p>Connsci is seeking an Information Security Analyst with hands on expertise supporting federal cybersecurity operations and compliance frameworks. The individual will be responsible for ensuring systems maintain a secure posture across their lifecycle and will also serve as an advisor on information security matters.</p><p><b>
In this role you can expect to:</b></p><ul><li>
Maintain and enhance vulnerability management programs, analyze scan data (e.g., Tenable Nessus) and apply STIGs for compliance.</li><li>
Monitor IT systems throughout their lifecycle for changes impacting security posture, ensuring alignment with RMF and ATO requirements.</li><li>
Develop, update, and maintain System Security Plans (SSPs), POA&amp;Ms, and configuration management records.</li><li>
Research vendor documentation and CVE advisories to identify and implement remediation steps or compensating controls.</li><li>
Prioritize vulnerabilities and implement remediation action plans in conjunction with system and application owners</li><li>
Support incident response activities, continuous monitoring, and risk assessments of all security controls.</li><li>
Provide technical guidance, policy documentation, and security status reporting to stakeholders.</li></ul><p><b>
Basic Qualifications:</b></p><ul><li>
Bachelor's degree in IT, Computer Science, Engineering, or related field; or equivalent experience</li><li>
At least 5 years of experience supporting federal cybersecurity programs</li><li>
At least 3 years of experience with security tools (Nessus, Splunk, Wireshark, Palo Alto, or CrowdStrike)</li><li>
At least 3 years of experience with RMF, STIGs, security auditing, and incident handling</li><li>
At least 1 year of experience researching and remediating advisories from the CVE: Common Vulnerabilities and Exposures database</li><li>
At least one of the following certifications: Security+, CISSP, CISM, CISA, GSEC, CCNA-Security, SSCP, CAP, or CASP</li><li>
Minimum current government clearance level of Top Secret or Public Trust High Risk Tier 4</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Experience supporting federal law enforcement agencies</li><li>
Knowledge of SDLC and integration of security across IT projects</li></ul><p></p><p><b><br>
Location: </b>This role allows for remote work but there is a chance for occasional time in office for critical/collaborative initiatives. The office location is in Washington, DC and is Metro and rail (Union Station) accessible.</p><p></p><p><b><br>
About Connsci</b></p><p>
At Connsci, our mission is to be a trusted strategic partner for our clients, helping them achieve impactful results by addressing mission-critical issues that affect their bottom line. We recognize the importance of customizing our services to best fit our clients' needs and understanding what it takes to propel their organizations forward. By implementing industry-leading best practices and leveraging our multifaceted experience and expertise, we deliver services that are essential for any organization aiming to reach its goals.</p><p>
</p><p><b>What You Can Expect:</b></p><ul><li><b>
Collaboration and Innovation</b>: Work in an environment where collaboration and innovation are key. You'll have the opportunity to contribute to projects that make a real difference for our clients.</li><li><b>
Professional Growth</b>: Be part of a team that values professional development. We offer opportunities for growth and advancement, allowing you to enhance your skills and career.</li><li><b>
Impactful Work</b>: Engage in meaningful work that addresses mission-critical issues and supports organizations in achieving their goals.</li></ul><p>
By joining Connsci, you'll become part of a dedicated team that is committed to delivering strategic, impactful solutions tailored to our clients' unique needs, enabling them to achieve their goals with confidence and efficiency. If you're passionate about cybersecurity and IT services, and eager to contribute to a dynamic team, we encourage you to explore opportunities with us.</p><p></p><p><br>
At this time, Connsci will not sponsor a new applicant for employment authorization for this position.</p><p>
</p><p>Connsci is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.</p><p>
</p><p>This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. Connsci makes hiring decisions based solely on qualifications, merit, and business needs at the time.</p></div>

Security Analyst (Top Secret Cleared)

iP-Plus Consulting, Inc.

<p>Position Summary</p><p>The Compliance Manager, Mid &ndash; Training supports the OIS Cybersecurity Services (CS) Division in enhancing OS privacy and security practices through effective training and awareness programs. This position is responsible for developing, implementing, and managing role-based and baseline training initiatives for OS stakeholders, ensuring compliance with federal cybersecurity policies, NIST RMF, FISMA, and OS-specific standards. The Compliance Manager ensures that training programs promote a culture of security, reinforce compliance objectives, and prepare OS staff to effectively manage cybersecurity risks.</p><p>Functional Responsibilities</p><p>OS Data Guardian Program Support</p><ul><li>Manage and sustain the OS Data Guardian Program, a collaborative forum for security and privacy stakeholders across OS StaffDivs.</li><li>Facilitate sharing of best practices, information, and strategies to improve OS security posture.</li><li>Promote continuous engagement and collaboration among cybersecurity and privacy stakeholders to support OS cybersecurity goals.</li></ul><p>Training Development &amp; Delivery</p><ul><li>Develop, maintain, and implement baseline and role-based cybersecurity training for SSPOs, System Owners (SOs), Business Owners (BOs), Project/Program Managers, and other OS stakeholders.</li><li>Follow Instructional Systems Design (ISD) principles to assess training needs, establish learning objectives, design curricula, and evaluate training effectiveness.</li><li>Customize SSPO training to address primary responsibilities, advanced skills, tool updates, and evolving cybersecurity threats.</li><li>Ensure that all training programs support operational duties, ongoing risk management, and compliance with OS and federal standards.</li><li>Develop specialized, advanced training and targeted sessions for super-users and stakeholder communities.</li></ul><p>Training Compliance Management</p><ul><li>Launch, monitor, and track training compliance across all OS StaffDivs, ensuring 100% participation in annual information security and privacy awareness programs.</li><li>Maintain real-time compliance tracking in preparation for FISMA and other federal reporting requirements.</li><li>Provide metrics and reports on training completion, compliance trends, and training effectiveness to senior leadership.</li></ul><p>Stakeholder Engagement &amp; Communication</p><ul><li>Serve as a communication conduit, disseminating information and stimulating open dialogue regarding security, privacy, and compliance topics.</li><li>Educate OS stakeholders on the ATO process, ongoing authorization, and use of information security policies and tools.</li><li>Promote understanding of cybersecurity roles, responsibilities, and risk management practices across OS StaffDivs.</li></ul><p>Continuous Improvement &amp; Program Evaluation</p><ul><li>Collect and analyze feedback to improve training programs, instructional methods, and training delivery.</li><li>Evaluate the effectiveness of training in supporting OS cybersecurity objectives and compliance requirements.</li><li>Ensure training programs evolve to address updates to tools, procedures, regulations, and emerging cybersecurity risks.</li></ul><p>Required Qualifications</p><ul><li>Minimum of 3&ndash;5 years of experience in compliance, cybersecurity, or training program management, preferably within federal or regulated environments.</li><li>Knowledge of federal cybersecurity policies, NIST RMF, FISMA, and OS-specific security standards.</li><li>Experience designing, implementing, and evaluating role-based and baseline training programs.</li><li>Strong organizational, analytical, and communication skills, with experience engaging stakeholders at multiple levels.</li><li>Ability to manage multiple projects, track compliance metrics, and report on training outcomes.</li></ul><p>Education &amp; Experience</p><ul><li>Bachelor&rsquo;s degree in Information Technology, Cybersecurity, Education, or a related field required.</li><li>Prior experience supporting cybersecurity or privacy awareness programs in federal or government contracting environments preferred.</li></ul><p>Desired Certifications (Preferred)</p><ul><li>Certified Information Systems Security Professional (CISSP)</li><li>Certified Information Security Manager (CISM)</li><li>Certified Information Privacy Professional (CIPP)</li><li>Instructional Design or Training-related certification (e.g., CPTM, ATD)</li><li>Project Management Professional (PMP)</li></ul><p>Job Type: Full-time</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Health savings account</li><li>Paid time off</li><li>Vision insurance</li></ul><p>Work Location: Hybrid remote in Washington, DC 20201</p>

Compliance Manager, Mid (training)

<p>Position Summary</p><p>The Compliance Manager, Mid &ndash; Policy provides critical policy and governance expertise to the OIS Cybersecurity Services (CS) Division. This role supports the development, enhancement, and implementation of OS cybersecurity and IT privacy policies, standards, procedures, and SOPs. The position ensures that OS IT systems maintain confidentiality, integrity, and availability, meet federal regulatory requirements, and align with cybersecurity best practices. The Compliance Manager plays a central role in analyzing existing policies, identifying gaps, and producing actionable policy recommendations to maintain a proactive and compliant security posture.</p><p>Functional Responsibilities</p><p>Policy Development &amp; Governance</p><ul><li>Develop, review, and maintain cybersecurity and IT privacy policies, standards, procedures, plans, and SOPs in alignment with OS Cybersecurity Policy and Governance (P&amp;G) task schedule.</li><li>Ensure all policies are consistent with HHS, NIST, and other federal requirements, and reflect cybersecurity and privacy best practices.</li><li>Collaborate with OS StaffDivs, third-party vendors, and stakeholders to promulgate policy guidance and ensure compliance across IT systems.</li></ul><p>Policy Analysis &amp; Research</p><ul><li>Conduct comprehensive research and literature reviews to support policy development and enhancement.</li><li>Analyze existing policies to identify gaps, conflicts, or areas requiring updates to maintain alignment with federal regulations and organizational objectives.</li><li>Evaluate policy effectiveness and propose actionable recommendations to address identified deficiencies.</li></ul><p>Technical Writing &amp; Documentation</p><ul><li>Execute high-quality technical writing to produce clear, accurate, and consistent policies, SOPs, guidance documents, and memoranda.</li><li>Ensure all documentation meets rigorous quality control and quality assurance standards and supports compliance, audit readiness, and operational clarity.</li></ul><p>Stakeholder Engagement &amp; Communication</p><ul><li>Advise OS leadership on policy trade-offs, implementation strategies, and governance decisions.</li><li>Serve as a liaison to ensure OS StaffDivs and contractors understand and adhere to security and privacy policies.</li><li>Provide clear, concise policy communication to facilitate adoption and compliance across OS IT systems.</li></ul><p>Continuous Improvement &amp; Compliance Assurance</p><ul><li>Monitor policy relevance in response to evolving federal regulations, industry standards, and organizational needs.</li><li>Recommend policy adjustments or enhancements to maintain proactive cybersecurity risk management.</li><li>Support audit readiness and compliance assessments by providing documentation and guidance on policy adherence.</li></ul><p>Required Qualifications</p><ul><li>Minimum of 3&ndash;5 years of experience in compliance, policy development, IT governance, or cybersecurity policy.</li><li>Strong knowledge of federal cybersecurity frameworks, HHS policies, NIST standards, and IT privacy and security regulations.</li><li>Demonstrated ability to conduct research, analyze complex information, and develop actionable policy recommendations.</li><li>Excellent technical writing, analytical, and communication skills.</li><li>Strong organizational and project management abilities, capable of managing multiple policy initiatives simultaneously.</li></ul><p>Education &amp; Experience</p><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Business, Law, or a related field required.</li><li>Experience supporting federal, DoD, or government IT programs preferred.</li></ul><p>Desired Certifications (Preferred)</p><ul><li>Certified Compliance &amp; Ethics Professional (CCEP)</li><li>Certified Information Systems Security Professional (CISSP)</li><li>Certified Information Security Manager (CISM)</li><li>Project Management Professional (PMP)</li></ul><p>Job Type: Full-time</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Flexible spending account</li><li>Health insurance</li><li>Health savings account</li><li>Paid time off</li><li>Retirement plan</li><li>Vision insurance</li></ul><p>Work Location: Hybrid remote in Washington, DC 20201</p>

Compliance Manager, Mid (Policy)

U.S. National Park Service

Information Technology Specialist

U.S. Immigration and Customs Enforcement

Information Technology Specialist (InfoSec)

Explore 57+ Cybersecurity specialist in Washington this October. Find roles across top companies and apply now to boost your career.