Policy & Technical Standards Analyst

Job Description

Policy & Technical Standards Analyst

\n

Location: Washington, DC (Hybrid)

\n

Company: Big Impact Tech (BIT)

\n

Clearance Required: Active Secret; must be able to obtain a TSA clearance

\n

\n

About Big Impact Tech

\n

Big Impact Tech (BIT) is a Small Business providing IT and business management consulting to federal and commercial clients. We deliver mission-focused solutions in data, cloud, cybersecurity, and program management.

\n

\n

Position Overview

\n

This position requires an active Secret clearance and the ability to obtain a TSA clearance. The Policy & Technical Standards Analyst drafts and maintains cybersecurity directives, technical standards, and handbooks, tracking 48 technical standards annually and delivering quarterly policy updates. This position also manages the policy intake mailbox and help desk, acknowledging inquiries within 1 hour. The minimum 4 years of experience reflects the need for strong technical writing and knowledge of federal cybersecurity policy.

\n

\n

Responsibilities

\n

• Drafts and updates cybersecurity directives, technical standards, and handbooks.

\n

• Supports Zero Trust (ZT) policy drafting.

\n

• Tracks 48 technical standards annually and delivers quarterly policy updates.

\n

• Manages the policy intake mailbox and help desk, acknowledging inquiries within 1 hour.

\n

• Maintains the Policy Master Schedule.

\n

• Manages SharePoint document control and versioning.

\n

• Other duties as assigned.

\n

\n

Required Qualifications

\n

• BA/BS degree in Cybersecurity, Information Technology, English, or a related discipline.

\n

• Minimum Experience Required:

\n

• Minimum 4 years of experience writing cybersecurity policy, standards, or procedures.

\n

• Demonstrated knowledge of NIST, FISMA, and federal cybersecurity directives.

\n

• Demonstrated familiarity with Zero Trust architecture (e.g., NIST SP 800-207, OMB M-22-09).

\n

• Demonstrated experience with SharePoint document management and version control.

\n

\n

Additional Experience:

\n

Security+ or CGRC certification.

\n

CISSP certification.