Cybersecurity Policy Analyst (SSA)

Founded in 2003, IT Concepts’ core values – customer-centricity, teamwork, drive to deliver, innovation, and integrity – ensure we work together to be the best, realize objectives, and positively impact our communities. We intentionally created and sustain our ITC culture that embraces change, experimentation, continuous learning, and improvement. We bring our design thinking problem-solving approach that challenges assumptions, prioritizes curiosity, and invites complexity to deliver innovative, efficient, and effective solutions. As we continue to grow in the support of our government customers, we are looking for driven and innovative individuals to join our team.

IT Concepts, INC. (ITC) seeks a Cybersecurity Policy Analyst to become a vital part of our team and offer invaluable support to the Social Security Administration’s Office of Information Security (OIS) in building and maintaining robust policy frameworks and procedures. We are looking for a candidate who possesses a profound grasp of the NIST Cybersecurity Framework (CSF) version 2.0 and has experience reviewing policies for government agencies based on CSF. Additionally, a solid understanding of the NIST Risk Management Framework is crucial.

Responsibilities:

• Supporting the OIS Policy Team in developing, maintaining, automating, and storing policy products and program roadmap(s).
• Research and analyze updated language for the ISP, POMS, AIMS, and CUI in accordance with NIST, OMB, FISMA, other federal mandates, and unknown emerging sources and ensure all controls are wholly and accurately incorporated into policy.
• Conduct reviews of documents published in the policy ecosystem to ensure accuracy and validity related to changes, updates, enhancements, and new products related to NIST 800-53. Reviews will be used to confirm ownership, add relevant documents, archive retired documents, and replace archived documents with updated ones.
• Conduct annual reviews and updates of POMS and CUI to address gaps and discrepancies.
• Enhancing ecosystem authoring, change, approval, and publishing workflow processes to improve efficiencies and automate where possible.
• Assisting in developing new policies to address identified gaps in the existing framework.
• Prepare policy and supplemental document updates for publication, track changes, and capture metrics concerning published changes.
• Support policy waiver lifecycle by participating in meetings, recording notes, and action items.
• Facilitate and participate in policy and risk-related discussions, assisting with meeting logistics and recording action items.
• Recommend and implement communication techniques to effectively promote the ecosystem and policy changes to our end users.
• Research and respond to requests for audit artifacts and findings related to the security policy or other ecosystem documents.
• Develop weekly reports across the various tasks.
• Continue to enhance the ecosystem user interface for ease of customer use.

Location: Hybrid in Woodlawn, MD

Pay Range: $65-85/hour. Factors affecting pay within this range may include geography/market, skills, education, experience, and other qualifications of the successful candidate.

Requirements

• Bachelor's degree in computer science, information technology, or a related field.
• 1-3 years of experience in technical writing, preferably in cybersecurity or IT policy documentation.
• Understanding of the NIST Cybersecurity Framework (CSF) version 2.0 and experience in writing policies based on CSF for government agencies.
• Knowledge of NIST 800-53 and other Federal level Information Security Policies and Requirements (e.g., FISMA, FedRAMP, OMB, RMF, FIPS, FTI Requirements, FAR, etc.), laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
• Expert in Microsoft suite of word processing, spreadsheet, imaging, and telecommunications software.
• Proficiency in drafting technical reports, plans, and related correspondence.
• Ability to effectively communicate technical cybersecurity concepts to non-technical stakeholders, including leaders of federal agencies.
• Strong analytical and problem-solving skills.
• Skills in administrative planning activities, including preparation of functional and specific support plans, preparing and managing correspondence, and staffing procedures
• Skills in preparing drafts, technical reports, plans, and related correspondence
• Excellent written and verbal communication skills.
• Ability to work effectively both independently and as part of a team.

Preferred:

• Relevant certifications (e.g., Security+ or CISSP)
• Experience developing in Confluence

Clearance Requirements:

• Must be able to obtain and maintain Public Trust

Benefits

The Company

We believe in generating success collaboratively, enabling long-term mission success, and building trust for the next challenge. With you as our partner, let’s solve challenges, think innovatively, and maximize impact. As a valued member of our team, you have the unique opportunity to work in a diverse range of technology and business career paths, all while supporting our nation and delivering innovative technology solutions. We are a close community of experts who pride ourselves on creating an environment defined by teamwork, dedication, and excellence.

We hold three ISO certifications (27001:2013, 20000-1:2011, 9001:2015) and two CMMI ML 3 ratings (DEV and SVC).

Industry Recognition

Growth | Inc 5000’s Fastest Growing Private Companies, DC Metro List Fastest Growing; Washington Business Journal: Fastest Growing Companies, Top Performing Small Technology Companies in Greater D.C.

Culture | Northern Virginia Technology Council Tech 100 Honoree; Virginia Best Place to Work; Washington Business Journal: Best Places to Work, Corporate Diversity Index Winner – Mid-Size Companies, Companies Owned by People of Color; Department of Labor’s HireVets for our work helping veterans transition; SECAF Award of Excellence finalist; Victory Military Friendly Brand; Virginia Values Veterans (V3); Cystic Fibrosis Foundation Corporate Breath Award

Benefits

We offer a competitive benefits package that includes paid time off, healthcare benefits, supplemental benefits, 401k including an employer match, discount perks, rewards, and more. 

We invest in our employees – Every employee is eligible for education reimbursement for certifications, degrees, or professional development.  Reimbursement amounts may fluctuate due to IRS limitations. We want you to grow as an expert and a leader and offer flexibility for you to take a course, complete a certification, or engage in other professional growth and networking. We are committed to supporting your curiosity and sustaining a culture that prioritizes a commitment to continuous professional development. 

We work hard, we play hard. ITC is committed to incorporating fun into every day. We dedicate funds for activities – virtual and in-person – e.g., we host happy hours, holiday events, fitness & wellness events, and annual celebrations. In alignment with our commitment to our communities, we also host and attend charity galas/events. We appreciate your commitment to building a positive workspace for you to be creative, innovative, and happy.

AAEO & VEVRAA

ITC is an Affirmative Action/Equal Opportunity employer and a VEVRAA (Vietnam Era Veterans' Readjustment Assistance Act) Federal Contractor. As such, any personnel decisions (hire, promotion, job status, etc.) on applicants and employees are based on merit, qualifications, competence, and business needs, not on race, color, citizenship status, national origin, ancestry, sexual orientation, gender identity, age, religion, creed, physical or mental disability, pregnancy, childbirth or related medical condition, genetic information of the employee or family member of the employee, marital status, veteran status, political affiliation, or any other factor protected by federal, state or local law.

ITC is strongly committed to compliance with VEVRAA and other applicable federal, state, and local laws governing equal employment opportunity. We have developed comprehensive policies and procedures to ensure our hiring practices align with these requirements.

As part of our VEVRAA compliance efforts, ITC has established an affirmative action plan outlining our commitment to recruiting, hiring, and advancing protected veterans. This plan is regularly reviewed and updated to ensure its effectiveness.

We encourage protected veterans to self-identify during the application process. This information is strictly confidential and will only be used for reporting and compliance purposes as required by law. Providing this information is voluntary and will not impact your employment eligibility.

Our commitment to equal employment opportunity extends beyond legal compliance. We are dedicated to fostering an inclusive workplace where all employees, including protected veterans, are treated with dignity, respect, and fairness.

How to Apply

To apply to IT Concept Positions- Please click on the: “Apply for this Job” button at the bottom of this Job Description or the button at the top: “Application.”  Please upload your resume and complete all the application steps. You must submit the application for IT Concepts to be considered for a position.  If you need alternative application methods, please email careers@useitc.com and request assistance.  

Accommodations

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. If you need to discuss reasonable accommodations, please email careers@useitc.com.  

#itccareers #LI-JG1