Description:

The contractor will develop, revise, and maintain information security governance documentation. The work includes creating technically accurate, enforceable documentation aligned with cybersecurity frameworks and organizational objectives.

Primary responsibilities include:

Develop and revise information security policies

Develop technical standards supporting approved security policies.

Develop operational procedures and implementation of guidance.

Create security baselines and configuration documentation.

Develop compliance documentation for technical accuracy, consistency, completeness, and enforceability.

Recommend improvements to governance documentation structure and organization.

Produce clear documentation suitable for technical staff, management, auditors, and external reviewers.

Work with subject matter experts to accurately document existing processes and required controls.

Maintain document version control and support periodic review.

Required Skills/Experience

Technical writing experience involving cybersecurity or IT governance.

Demonstrated experience with several of the following:

NIST Cybersecurity Framework

NIST SP 800-53

IRS Publication 1075

CIS Critical Security Controls

Security governance and risk management

Identity and Access Management

Incident Response

Vulnerability Management

Disaster Recovery and Business Continuity

Vendor Risk Management

Security Awareness and Training

Policy Lifecycle Management

Preferred/Not Required

Experience writing documentation aligned with NIST Cybersecurity Framework, NIST SP 800-53, and IRS Publication 1075

CISSP, CISA, CGRC, Security+, or equivelant certifications.