CSPA Requirements:

• Job field related certification(s), CISSP/CISA/CRISC (preferred but not required)

• Five (5) to Ten (10) or more years of experience within Cyber Security, with practical experience in writing Cyber Security policies, standards, baselines

• In-depth knowledge of industry compliance requirements and standards.

• Proficiency and experience in any policy management and/or risk software

• Exceptional ability to formulate compliance policies, procedures, and related documentation.

• Ability to effectively train employees.

Top Must Haves:

• Previous experience managing and creating cyber policies and standards

• Familiarity with cyber security frameworks, such as, NIST-CSF, ISO 2700x, etc.

• General cyber security and risk management experience

• Auditing background experience helpful

• Critical thinking and problem-solving skills

• Organization, project management, and strategic planning skills

• Familiarity with process improvement methodology

• Attention to detail and desire to embrace complexity

• Experience and proficiency in technical writing

• Experience in program and project management, implementing Cyber Security policies/ standards/ baselines

• Experience and solid understanding of technical platforms, cloud services, operating systems, and infrastructure

• Experience and strong analytical, research, and problem-solving skills, as well as attention to detail

• Strong presentation, written and verbal communication skills

Key Responsibilities

• Handle and mature the cyber security policy framework (policies, standards, and control baselines), and integrate by partnering with control owners.

• Lead working groups to capture policy requirements and feedback from SMEs and collaborators across the organization.

• Analyzing and updating existing compliance policies and related documentation.

• Developing and executing new policies and procedures as required.

• Track and report on project status of policy updates, including producing metrics

• Provide updates to leadership teams on program framework maturity, risk mitigation, and strategy implementation progress.

• Communicating policies and guidelines to Management and designated departments.

• Help analyze the existing policy exception process and build a new process for approved cybersecurity policy exceptions.

• Training others on cyber security policies and standards.

• Keeping up with compliance requirements and amendments to regulations.

SSTech LLC

New Jobs

Cyber Security Policy Analyst