Cybersecurity Policy Analyst

Wits Solutions Inc. (WITS) is a SBA certified Small Disadvantaged Business with headquarters in the metropolitan Washington D.C. area. WITS has been providing best-in-class solutions in professional IT and administrative consulting to various Federal, State, Local and commercial customers. At WITS, we believe in working not for our clients but with them. This is why right from the beginning; our analysts and solution-builders work closely with our clients to ensure that the project outcomes continue to deliver value long into the future.

SECURITY CLEARANCE DoD Top Secret; eligible for IT-I Critical Sensitive / Tier 5 (T5). Any CERT team member must maintain CSSP Analyst certification. EDUCATION/CERTIFICATIONS MANDATORY No separate degree minimum is stated in the task-order PWS. Candidate must meet the applicable JETS 2.0 IDIQ labor-category education requirements. CSSP Analyst certification is required WORK EXPERIENCE MANDATORY Minimum 7 years of relevant cybersecurity policy experience. Experience with the general tenets supporting DoD implementation of cybersecurity policies, procedures and processes. EDUCATION/CERTIFICATIONS NICE TO HAVE CISSP, CISM, Security+, CSSP Analyst or other DoDM 8140.03-aligned credentials are advantageous when applicable to assigned duties. WORK EXPERIENCE NICE TO HAVE Direct DoD/DLA CSSP policy, audit, assessment, inspection-readiness, exercise planning, SOP/TTP development, DCDC/DoD directive tracking, and senior-level cybersecurity briefing experience. ROLES AND RESPONSIBILITIES Review, consolidate and develop cybersecurity policy with Government approval. Assess IT policies, standards, guidelines and procedures to balance security and operational requirements. Provide technical policy support and assistance to DLA programs and stakeholders. Brief senior management on cybersecurity policy changes, updates and progress. Support review, analysis, development and maintenance of CSSP and Incident Response processes, policies and procedures. Support annual cybersecurity exercises, CSSP evaluations, compliance metrics, audit preparation, and tracking of DoD, DCDC and DLA cybersecurity directives. Develop or update supporting SOPs, TTPs, reports and briefing materials as required.