THOR Solutions is seeking a Cybersecurity Policy / IA Program Analyst to support a DHS information technology support services program focused on cybersecurity governance, assessment and authorization (A&A), and information assurance program support in Washington, DC.
This position develops and updates cybersecurity policies, tracking tools, user and operator training guides, and process guides that support information assurance governance in accordance with established DHS, federal, and Department of Defense cybersecurity policies. The analyst collaborates with government stakeholders to develop supporting documentation-including memoranda, process guides, interconnection security agreements, and memoranda of understanding-and maintains stakeholder-facing portal content derived from applicable policies. The position also supports the development and management of centralized training tracking and assists Information System Security Officers with the review and update of system management guides, policy development, and Standard Operating Procedures required for accreditation. Through these efforts, the analyst strengthens the cybersecurity policy framework and process maturity that enable compliant, well-governed information assurance operations.
Typical Responsibilities:- Develop and update cybersecurity policies, tracking tools, user and operator training guides, and process guides that support information assurance governance in accordance with established DHS, federal, and DoD cybersecurity policies.
- Collaborate with multiple government stakeholders to develop documentation including memoranda, process guides, Interconnection Security Agreements (ISAs), and Memoranda of Understanding (MOU).
- Develop and update portal/webpage content with relevant stakeholder information derived from DoD, federal, and agency policies to support cybersecurity operations.
- Support development and management of a centralized training tracking system.
- Assist Information System Security Officers (ISSOs) with the review and update of information system management guides, policy development, and Standard Operating Procedures (SOPs) required for accreditation.
- Develop training briefs and process documentation supporting cybersecurity governance, standards, and compliance.
- Support standardization of cybersecurity processes and templates across the organization.
Location: Full-time onsite at USCG Headquarters in Washington, DC.
Typical Physical Activity: Desk/computer work in an office environment. May involve: repetitive motion.
Typical Pay Range: The anticipated pay range for this position in the identified location(s) is $76,000 - 106,000. Actual compensation offered will be based upon individual factors including education, qualifications, and experience.
Existing TOP SECRET/SCI Security Clearance Required: This position requires an existing active TS/SCI security clearance prior to hire. Only U.S. citizens are eligible for a security clearance; therefore, only current U.S. citizens will be considered for this position.
Required Knowledge, Skills, and Abilities: - Bachelors degree in cybersecurity, information systems, information assurance, or a related discipline.
- At least four (4) years of information assurance experience with emphasis on cybersecurity policy development, training guide and process guide development, and governance documentation.
- Experience collaborating with government stakeholders to produce policy, process, and agreement documentation and supporting accreditation-related SOPs and management guides.
- Must possess active/current certifications to qualify as both DoD 8570/8140 IAT Level 2 and IAM Level 2.
- DoD 8570/8140 IAT Level 2 (required for systems assessment and authorization work), fulfilled by possessing ONE of the following:
- CompTIA Cybersecurity Analyst (CySA+)
- CompTIA Security+ CE (Sec+ CE)
- EC-Council Certified Network Defense (CND) v3
- Red Hat Certified System Administrator (RHCSA)
- CCNA Security
- Global Industrial Cyber Security Professional (GICSP)
- GIAC Security Essentials (GSEC)
- Systems Security Certified Practitioner (SSCP)
- CompTIA Advanced Security Practitioner (CASP)
- Cisco Certified Network Prof. Security (CCNP Security)
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP)
- GIAC Certified Enterprise Defender (GCED)
- GIAC Certified Incident Handler (GCIH)
- DoD 8570/8140 IAM Level 2 (required for IA program support work), fulfilled by possessing ONE of the following:
- CompTIA Advanced Security Practitioner (CASP)
- Certified Information Security Manager (CISM)
- Certified Information Systems Security Professional (CISSP)
- Certified Chief Information Security Officer (C-CISO)
- HealthCare Info. Security and Privacy Practitioner (HCISPP)
- Red Hat Certified System Administrator (RHCSA)
- Certified Authorization Professional (CAP)
- GIAC Security Leadership (GSLC)
- Certified Information Security Manager (CISM)
- Certified Chief Information Security Officer (C-CISO)
- GIAC Security Leadership (GSLC)
- Proficiency in Microsoft Office suite and SharePoint.
- Knowledge of data governance and data framework compliance.
- Strong organizational and communication skills.
Benefit Offerings: Along with competitive pay, THOR offers a comprehensive benefits package including:
- Paid Time Off (accrued)
- Paid Holidays
- 401(k) with employer match and Traditional/Roth options
- Medical Insurance (3 plan options)
- TRICARE Supplemental Coverage for TRICARE-eligible individuals
- Dental Insurance (2 plan options)
- Vision Insurance Plan (2 plan options)
- Healthcare and Dependent Care Flexible Spending Accounts (FSAs)
- Commuter/Transit Benefits
- Basic Life/AD&D Insurance for employee
- Additional Life Insurance options for employee + family
- Short-Term and Long-Term Disability Insurance
- Pet Benefits
- Legal Plan
- ID Theft Protection Plan
- Employee Assistant Plan and Work-Life Program
- Voluntary Leave Transfer Program
- Tuition Reimbursement Program
- Employee Referral Program
Please be aware that many of our positions require an existing security clearance or the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. Applicants to cleared positions who lack clearance eligibility will not be considered.
