ShorePoint is a cybersecurity services firm with a focus on high-profile, high-threat private and public-sector customers who demand experience and proven security models to protect their data. We are seeking a Policy Analystwho will support the growth of a new program. This is a unique opportunity to join a rapidly growing company and contribute to the development and maintenance of enterprise-wide cybersecurity governance framework.

Roles and Responsibilities

Responsible for determining information system requirements by evaluating business strategies; researching information technology standards; conducting system analyses and risk assessments; studying architecture/platform; identifying integration issues; or preparing cost estimates. Perform gap analysis of existing set of security policies and procedures against policy drivers and overarching compliance requirements including FISMA, OMB Memorandum, CISA guidance, NIST best practices, and federal laws.Will develop and update security policies and procedures as federal guidance changes and will maintain and publish guidance for various stakeholders throughout the organization.Will support mechanisms to receive feedback and incorporate updates as needed.Will develop white papers, executive briefings and memorandum to support and promote policy and guidance drivers and make recommendations on appropriate updates.

Required Skills

• Experience with drafting, and maintaining enterprise-wide cybersecurity policies, any technical standards, secure baseline configurations, and implementation guidance for the design and implementation of ZTA related cybersecurity controls within the information systems
• Experience with items such as white papers, Chief Information Security Officer (CISO) memos and similar documents necessary to show program/systems/service status, conduct change/configuration management of the program/system/service and promote the success and challenges of the program
• Experience aligning cybersecurity policies, instructions, technical standards and implementation guidance with overarching Federal regulations, guidance and best practices including but not limited to: Federal Information Processing Standards (FIPS), National Institute of Standards and Technologies (NIST) Standards, Office of Management and Budget Memos, Security Technical Implementation Guides (STIGs), CIS Benchmarks, Vendor Hardening Guides, Executive Orders (EOs), Binding Operational Directives, Office of Inspector General (OIG) recommendations and Government Accountability Office (GAO) recommendations

Education Requirement

• Bachelor’s or Master’s degree preferred

Years of Experience Requirement

• 2-5 years of experience performing functions in position description

Location

Hybrid – Washington, D.C OR Remote

Security Clearance

• Eligibility to obtain and maintain customer required security clearance