Security Governance and Policy Analyst

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise. In support of this mission, we have an immediate opportunity for a Security Governance and Policy Analyst. In this role you will help develop and maintain the cybersecurity policies that govern the DHS Intelligence Enterprise, translating Federal and Intelligence Community (IC) requirements into policy the enterprise can implement. You will work alongside the senior policy advisor to the Chief Information Security Officer (CISO), support cybersecurity audits, and prepare briefings for leadership. This position is on-site in a Government SCIF in Washington, DC. Duties include but not limited to: Develop and update enterprise cybersecurity policies and standards covering RMF, CNSSI, supply chain risk management, and AI/ML security.Research new Executive Orders, IC policies, and national security memos and recommend implementation actions.Identify required updates to the SCI Systems Instruction Manual (4300C), SCRM policy, and Security Common Controls Catalog.Coordinate with GRC personnel to validate control requirements in the GRC tool.Prepare responses in support of OIG FISMA and JWICS Cybersecurity Inspection Program audits.Draft stakeholder notifications and policy addendum or rescission language for CISO approval.Prepare reports, executive summaries, talking points, and briefing slides for the CISO and stakeholder forums.Maintain CISO SharePoint policy sites, the governance meeting calendar, and the data-call and tasker tracker.