Technical Policy Writer

Technical Policy Writer

The Technical Policy Writer develops, updates, and maintains clear, consistent, and audit-ready IT and cybersecurity policies, procedures, and related documentation supporting Agency systems and operations. This role translates complex technical and regulatory requirements into usable guidance for technical and non-technical audiences, ensuring documentation aligns with federal requirements and Agency governance under the strategic oversight of the Agency CIO/PMO.

• Draft, revise, and maintain IT and cybersecurity policies, procedures, and SOPs aligned to applicable federal requirements (e.g., NIST controls and OMB guidance) and Agency governance.
• Develop and maintain documentation supporting audit readiness, including document inventories, version control practices, crosswalks, and evidence-ready narratives that reflect how controls and processes are implemented.
• Support Security Assessment & Authorization (RMF/SA&A) documentation needs by contributing to SSP updates, procedure narratives, control implementation descriptions, and supporting artifacts.
• Collaborate with cybersecurity, IT operations, and engineering staff to capture current processes (as-is), define improved processes (to-be), and ensure documentation reflects operational reality.
• Create and maintain templates and style guides (e.g., policy format, SOP format, control evidence language) to improve consistency and reduce rework across deliverables.
• Develop user-facing communications and supporting materials for security training and awareness initiatives (e.g., quick reference guides, job aids, standard communications) in coordination with program stakeholders.
• Support configuration management and change control documentation by updating procedures, capturing change impacts to processes, and ensuring changes are traceable and auditable.
• Facilitate document review and approval workflows, incorporating stakeholder feedback and ensuring final products are clear, complete, and publish‑ready.

• Bachelor's degree in Technical Communication, IT, or related field.
• 3+ years of experience writing IT policies and procedures.
• Ability to translate complex technical content into plain language.
• Experience with federal IT documentation standards.

• Experience developing documentation for compliance programs (e.g., audits, assessments, or continuous monitoring) and maintaining artifacts in an audit‑ready state.
• Familiarity with risk management and authorization documentation (e.g., SSPs, POA&Ms, control narratives) and how documentation supports control evidence.
• Experience writing and maintaining operational runbooks and technical procedures for IT service management processes (e.g., incident management, change control, access management).
• Experience building document repositories, templates, and publishing workflows that support version control and stakeholder approvals.

• Published and maintained IT/cybersecurity policy and procedure library with consistent formatting and revision history.
• Document inventories and crosswalks (e.g., mapping policies/procedures to applicable requirements) as required by program stakeholders.
• Audit‑ready narratives and supporting documentation packages for reviews, assessments, and evidence requests.
• Standard templates, writing guides, and review/approval workflows to streamline document production.
• User‑facing job aids and communications supporting security training and awareness initiatives.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• While performing the duties of this job, the employee is regularly required to talk or hear.
• Possess the ability to fulfill any and all office activities normally expected in an office setting, to include, but not limited to: remaining seated for periods of time to perform computer entry, participating in filing activity, lifting and carrying office…