Description

You will draft policies, procedures, and standards to meet NIST 800-53 Revision 5, federal regulatory requirements, and state security standards.

This role is on-site.

Responsibilities

• Draft high-level policies, strategies, user manuals, reports, and technical documentation for REGSEC.
• Develop and evaluate Information Assurance Assessment and Authorization (A&A) for servers and systems.
• Evaluate existing documentation and business activities to identify gaps in controls, policies, and procedures.
• Manage Plans of Action & Milestones (POA&Ms), including tracking status, documenting milestones, and submitting metrics.
• Collaborate with Subject Matter Experts (SME) and DoIT teams as a liaison to the Regulatory Product Owner.

Required Skills

• 5+ years of experience in technical writing and document management.
• Solid understanding of NIST 800-53 Rev 5 controls and NIST 800-37 Risk Management Framework.
• Experience interpreting state and federal laws and regulations, including IRS Publication 1075 and CMS safeguards.
• Proficiency in defining requirements and translating complex technical concepts for diverse audiences.
• Strong organizational skills to manage large volumes of information from varying sources.
• Ability to work independently and manage project timelines and deliverables.
• Proven capability to collaborate with IT professionals and business subject matter experts.

Key Skills

Education

Any Graduate