Coalfire · 1 week ago
Policy Consultant
Coalfire Federal is a market leading cybersecurity consultancy firm that provides independent and tailored advice, assessments, technical testing and a full suite of cyber engineering services to Federal agency customers. They are currently seeking a Policy Consultant to support their federal team by researching and evaluating cybersecurity policies, facilitating security documentation, and implementing the organization’s information security program.
Information Technology & Services
Responsibilities
Support the ISSO in carrying out their roles and responsibilities by researching and evaluating the current Cybersecurity Policy and Minimum Requirements
Providing support for facilitating and helping identify current enterprise security infrastructure and implementation of security related documentation
Review, evaluate and provide recommended updates to enterprise level Policy, Procedures, Standards, and Guidelines and providing recommendations on areas for improvement with content and structure
Provide support to plan, prioritize, coordinate, and implement the organization’s information security program, leveraging existing Cybersecurity Governance processes
Gathering and organizing technical information about an organization's existing security products, and ongoing programs
Excellent written and verbal communications skills including the ability to communicate effectively with internal stakeholders
Strong interpersonal skills to interact with clients to provide Cyber Security Policy and Program advice and guidance
Ability to work in a flexible environment where requirements and procedures continuously evolve
Ability to work under pressure with efficiency and accuracy
Proficiency with Office 365 skills including Word, PowerPoint, Excel
Qualification
Required
A strong understanding of NIST 800-53 information security principles, guidance, and regulations
Ability to validate Cybersecurity Policy mapping to NIST 800-53 and implement information security requirements for IT systems through the RMF and CSF processes
Gathering and organizing technical information about an organization's existing security products, and ongoing programs
Excellent written and verbal communications skills including the ability to communicate effectively with internal stakeholders
Strong interpersonal skills to interact with clients to provide Cyber Security Policy and Program advice and guidance
Ability to work in a flexible environment where requirements and procedures continuously evolve
Ability to work under pressure with efficiency and accuracy
Proficiency with Office 365 skills including Word, PowerPoint, Excel
Completed Bachelor's degree from an accredited university, preferably in an IT related field
Minimum 5 years of overall experience in information security, security program, security operations or similar role - including at least 3 years serving as an Information System Security Officer (ISSO) responsibilities
Developing and documenting enterprise Information Assurance Policy, Procedure, Standards, and Guidelines
Experience with NIST 800-53 rev. 5
CISSP or CISM Certification
Preferred
Ability to obtain a clearance or a Public Trust is preferred, however all clearance levels and non-cleared applicants will also be considered
One or more of the following: CISA, Security+, CASP, CEH, Network+, or equivalent industry recognized certification
Benefits
Paid parental leave
Flexible time off
Certification and training reimbursement
Digital mental health and wellbeing support memberships
Comprehensive insurance options