We are committed to helping our clients navigate the complex world of technology and security, ensuring that they have the tools and expertise needed to protect critical government assets and data. We develop and execute a strategy for our clients to realize mission goals with the strongest effectiveness possible. We are looking for a knowledgeable and skilled Cybersecurity Policy Expert to join our team and support our work with the United States federal government. This role is essential in ensuring that our agency leverages technologies and tools while maintaining compliance with federal regulations and safeguarding sensitive information. This is your chance to work with a distinguished federal law enforcement agency committed to maintaining the highest standards of security and integrity. 

As a Cybersecurity Policy Expert, you will help shape our policies and procedures in the ever-evolving landscape of IT security and technology. You will work with senior leaders and clients to assist in the development of enterprise polices, standards, and standard operating procedures governing applications and technologies. You will help our partners navigate the complex world of technology and security, ensuring that they have the tools and expertise needed to protect critical government assets and data. Key responsibilities include:  

Work closely with the Cybersecurity Policy Team Lead to manage team operations, strategic planning, client relationships, hiring, and program execution. 

• Advance team and staff growth and performance; manage both early career staff and seasoned technical experts.  

• Collaborate with federal leadership and stakeholders to create comprehensive cybersecurity policies and guidelines that align with federal regulations, security standards, and best practices. 

• Monitor and ensure compliance with policies, regulations, and standards. 

• Optimize processes related to cyber policy making, ensuring the federal partner delivers timely, relevant policy solutions.  

• Conduct research and synthesizing information from various sources and preparing detailed reports, briefings, and presentations. 

• Ensuring policies are comprehensive, clear, and aligned with industry standards and regulatory requirements. 

• Manage multiple projects and deadlines efficiently with a strong attention to detail and exceptional organizational skills. This includes setting goals, timelines, and tracking progress. 

• Understand and share the legal and ethical implications of policies, especially in terms of user privacy, data protection, and artificial intelligence. 

• Work closely with IT teams, security teams, legal teams, and other relevant stakeholders to ensure that cybersecurity policies align with the organization's goals and security requirements. 

Required:

• Ability to hold a position of public trust with the US government. 

• Master's Degree in Related Program and 8 years of experience; 7 of which in policy analysis, government relations, or related fields, with a focus on data policy, technology policy, cybersecurity, AI ethics, compliance, etc.; OR 

• Bachelor's Degree in Related Program and 10 years of relevant experience; OR 
• No degree and 16 years of relevant experience
• Possesses at least one professional certification relevant to the technical service provided.
• Mission-driven, team-player mindset.  

• Experience leading end-to-end projects and programs centered in data and technology (e.g. digital transformation, privacy, cybersecurity, data governance, etc.); Demonstrated success navigating opportunities and risks of technology in the federal context. 

• Experience managing staff and a track record of effectively managing growth and performance. 

• Experience managing programs in complex organizational environments and overseeing the execution of multiple projects concurrently. 

• Strong project management skills including developing work plans/project plans, conducting resource planning, delegating tasks, mitigating risks, managing stakeholder feedback, and communicating project progress to executives. 

• Client-management acumen and a track record of building strong relationships with clients and executive stakeholders.  

• Expertise developing organizational policies, standard operating procedures, and standards related to data and technology (e.g. cybersecurity, data protection, data governance, etc.). 

• Track record of managing complex, cross-functional change management initiatives that positively impact organizational practices and operations.  

• Exceptional knowledge management skills and experience implementing digital KM strategies 

• Excellent written and verbal communication skills for communicating policies and procedures to employees, management, and stakeholders can convey complex information clearly to diverse audiences.  

• Understanding of change management best practices and bridging gaps between policy and behavior change. 

• Knowledge of current and emerging cybersecurity and data protection risks, threats, and vulnerabilities. 

• Knowledge of technology risk management best practices. 

• Flexibility to adapt to changing priorities and evolving policy landscapes and quickly learn and apply new information.  

• Ability to assess and weigh current and evolving security threats in an operational environment. 

• Possesses at least one professional certification relevant to the service provided. Maintain a certification relevant to the product being deployed and/or maintained.   

Preferred: 

• Experience managing cross-functional and matrixed teams strongly preferred. 

• Experience applying cybersecurity and data protection frameworks and regulations such as NIST 800-53, HIPAA, GDPR, state privacy regulations, etc. 

• Demonstrated knowledge of a variety of IT concepts, practices, and procedures to ensure the secure integration and operation of technology systems. 

• Experience implementing NIST controls.  

• An interest in supply chain C-SCRM, AI Governance, and Mobile Technology would be an asset. 

Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $150,000 to $190,000.  The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk’s total compensation package for employees. Learn more about additional Steampunk benefits here. 

Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors.  Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges.  As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers – and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.