Description

You will serve as a liaison to the Regulatory Product Owner, providing technical writing, governance, and policy management for Information Assurance Assessment and Authorization (A&A) for servers and systems.

Responsibilities

• Write technical documentation including user manuals, reports, proposals, and high-level REGSEC policies or strategies.
• Document control requirements from NIST 800-53, IRS Publication 1075, SSA Technical System Security Requirements, FBI CJIS, OCSS, and CMS MARS-E.
• Manage Plans of Action & Milestones (POA&Ms) by tracking status, documenting milestones, and submitting metrics.
• Evaluate existing business activities to assess and document gaps in controls, policies, and procedures across the HHS network.
• Collaborate with staff to identify current processes that align with security and privacy control requirements.

Required Skills

• 3+ years of experience in technical writing and technical documentation.
• 3+ years of experience working within state or federal government structures.
• 3+ years of experience working within a project governance structure using specific methodologies and templates.
• 3+ years of experience using document management software.
• Solid understanding of NIST 800-53 Rev 5 controls and the NIST 800-37 Risk Management Framework.
• Proven ability to read and apply state and federal laws and regulations.
• Strong organizational and task management skills to handle multiple priorities in a cross-functional environment.
• Ability to break down complex tasks into actionable work items and work independently.
• Effective communication skills for interacting with diverse personalities and work styles.

Preferred Skills

• 3+ years of experience interpreting current processes and relating them to requirements alongside IT professionals and SMEs.
• 3+ years of experience in process and gap analysis.

Key Skills

Education

Any Graduate