All jobs → Partner boards

Cybersecurity Policy Analyst

GUNNISON CONSULTING GROUP, INC • Bethesda, MD, US • published 2026-10-03 03:13:59.909082

Description

Description: *Salary: $95,000 \- $107,000/year* **Work location**: Hybrid, 1\-2 days per week on\-site in Bethesda, MD. The Policy Analyst will lead Security Policy and Standards Support for ZTA Operationalization, under the NIH Governance, Risk \& Compliance (GRC) Zero Trust Architecture (ZTA) Support Services task order for the NIH Office of the Chief Information Officer (OCIO). Working in the Risk \& Policy Pod, candidate will turn federal and HHS Zero Trust mandates into a single, enforceable NIH policy framework. Candidate will also support communications and governance. * Build the Single Policy Framework: NIH ZTA policy, then standards by pillar, then implementation guides by workload family, then procedures, with an enterprise risk management (ERM) risk\-appetite statement at the top. * Trace every policy statement up to its federal or HHS source (EO 14028, OMB M\-22\-09, HHS IS2P, HHS ZTA Strategy) and down to the Overlay control, architecture pattern, and governance checkpoint that enforce it. * Inventory NIH security policies, IS2P\-derived standards, and procedures. Benchmark them against NIST SP 800\-53 Rev 5, 800\-207, 800\-63\-4, the CISA ZTMM, and current threats (M...

Get jobs like this daily in Telegram: @careeri_bot