Senior Cybersecurity Governance & Policy Specialist Level II with Security Clearance

Title Senior Cybersecurity Governance & Policy Specialist Level III Full-Time/Part-Time Full-Time Description The Senior Cybersecurity Governance & Policy Specialist - Level III serves as the principal cybersecurity governance and policy advisor supporting the Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE) Chief Information Security Officer (CISO). This senior-level position is responsible for developing, implementing, and maintaining enterprise-wide cybersecurity governance frameworks, policies, standards, and procedures that ensure compliance with Federal, DHS, and Intelligence Community (IC) cybersecurity mandates.

The Senior Cybersecurity Governance & Policy Specialist provides strategic leadership in cybersecurity governance by interpreting complex Federal regulations, Executive Orders, National Security Memoranda (NSMs), Intelligence Community Directives (ICDs), and NIST guidance into actionable organizational policies and implementation strategies. This position serves as a key liaison among DHS leadership, cybersecurity stakeholders, auditors, and Intelligence Community partners while supporting enterprise governance initiatives, regulatory compliance, and cybersecurity modernization efforts.

The ideal candidate is an experienced cybersecurity governance professional with exceptional analytical, policy development, technical writing, and executive communication skills, capable of advising senior leadership on cybersecurity governance and compliance across highly classified environments.

• Serve as the principal Cybersecurity Governance and Policy Advisor to the DHS Intelligence Enterprise Chief Information Security Officer (CISO).
• Develop, maintain, and update enterprise-wide cybersecurity policies, standards, procedures, and governance frameworks supporting DHS Intelligence Enterprise operations.
• Analyze and interpret Federal laws, Executive Orders, National Security Memoranda (NSMs), Office of Management and Budget (OMB) guidance, DHS directives, Intelligence Community Directives (ICDs), and cybersecurity standards to ensure organizational compliance.
• Develop cybersecurity governance guidance aligned with:
• NIST Risk Management Framework (RMF)
• NIST SP 800-53
• CNSSI 1253
• ICD 503
• DHS Sensitive Systems Policy Directive 4300C
• NIST AI Risk Management Framework (AI RMF)
• Classified Supply Chain Risk Management (C-SCRM) guidance
• Conduct policy gap analyses and recommend implementation strategies for new and revised Federal, DHS, and Intelligence Community cybersecurity requirements.
• Identify requirements for updates to the DHS 4300C Instruction Manual, Security Common Controls Catalog, Supply Chain Risk Management (SCRM) policies, and related governance documentation.
• Coordinate policy implementation activities with Governance, Risk, and Compliance (GRC) administrators and cybersecurity engineering teams.
• Research newly issued Executive Orders, Intelligence Community policies, National Security Memoranda, and other cybersecurity directives; prepare implementation guidance and compliance recommendations for DHS leadership.
• Develop cybersecurity governance strategies supporting emerging technologies, including Zero Trust Architecture (ZTA), Artificial Intelligence (AI), Machine Learning (ML), cloud security, and cybersecurity modernization initiatives.
• Prepare responses, supporting documentation, and corrective action plans for:
• Federal Information Security Modernization Act (FISMA) audits
• Office of Inspector General (OIG) audits
• Joint Compliance Inspection Program (JCIP) reviews
• Intelligence Community oversight activities
• Develop executive-level communications, policy memoranda, briefing papers, white papers, reports, and PowerPoint presentations for the CISO, senior executives, and DHS Intelligence Enterprise leadership.
• Present cybersecurity governance updates during executive leadership meetings, Intelligence Community Oversight Program (ICOP) sessions, governance boards, and cybersecurity working groups.
• Monitor cybersecurity policy compliance across DHS Intelligence Enterprise Components and prepare compliance status reports, metrics, and executive dashboards.
• Manage and maintain cybersecurity governance content on A-LAN and C-LAN SharePoint portals, ensuring policies, standards, guidance, and reference materials remain current.
• Maintain centralized governance calendars, working group schedules, action item trackers, and policy repositories.
• Represent DHS Intelligence Enterprise in Intelligence Community cybersecurity governance working groups, interagency meetings, and collaborative policy initiatives.
• Provide mentorship and technical guidance to junior governance analysts and cybersecurity policy specialists

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
• Minimum 10 years of progressively responsible experience in cybersecurity governance, policy development, information assurance, or cybersecurity compliance supporting Federal…