Senior Cybersecurity Governance & Policy Specialist — Level III

RiVidium Inc. is seeking an experienced Senior Cybersecurity Governance & Policy Specialist - Level III to serve the team for all Cybersecurity and Intelligence Enterprise Information Technology Services (CIEITS) program activities.

The Senior Cybersecurity Governance & Policy Specialist - Level III serves as the principal cybersecurity governance and policy advisor supporting the Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE) Chief Information Security Officer (CISO). This senior-level position is responsible for developing, implementing, and maintaining enterprise-wide cybersecurity governance frameworks, policies, standards, and procedures that ensure compliance with Federal, DHS, and Intelligence Community (IC) cybersecurity mandates.

The Senior Cybersecurity Governance & Policy Specialist provides strategic leadership in cybersecurity governance by interpreting complex Federal regulations, Executive Orders, National Security Memoranda (NSMs), Intelligence Community Directives (ICDs), and NIST guidance into actionable organizational policies and implementation strategies. This position serves as a key liaison among DHS leadership, cybersecurity stakeholders, auditors, and Intelligence Community partners while supporting enterprise governance initiatives, regulatory compliance, and cybersecurity modernization efforts.

The ideal candidate is an experienced cybersecurity governance professional with exceptional analytical, policy development, technical writing, and executive communication skills, capable of advising senior leadership on cybersecurity governance and compliance across highly classified environments.

Key Responsibilities

• Serve as the principal Cybersecurity Governance and Policy Advisor to the DHS Intelligence Enterprise Chief Information Security Officer (CISO).
• Develop, maintain, and update enterprise-wide cybersecurity policies, standards, procedures, and governance frameworks supporting DHS Intelligence Enterprise operations.
• Analyze and interpret Federal laws, Executive Orders, National Security Memoranda (NSMs), Office of Management and Budget (OMB) guidance, DHS directives, Intelligence Community Directives (ICDs), and cybersecurity standards to ensure organizational compliance.
• Develop cybersecurity governance guidance aligned with:
  • NIST Risk Management Framework (RMF)
  • NIST SP 800-53
  • CNSSI 1253
  • ICD 503
  • DHS Sensitive Systems Policy Directive 4300C
  • NIST AI Risk Management Framework (AI RMF)
  • Classified Supply Chain Risk Management (C-SCRM) guidance
• Conduct policy gap analyses and recommend implementation strategies for new and revised Federal, DHS, and Intelligence Community cybersecurity requirements.
• Identify requirements for updates to the DHS 4300C Instruction Manual, Security Common Controls Catalog, Supply Chain Risk Management (SCRM) policies, and related governance documentation.
• Coordinate policy implementation activities with Governance, Risk, and Compliance (GRC) administrators and cybersecurity engineering teams.
• Research newly issued Executive Orders, Intelligence Community policies, National Security Memoranda, and other cybersecurity directives; prepare implementation guidance and compliance recommendations for DHS leadership.
• Develop cybersecurity governance strategies supporting emerging technologies, including Zero Trust Architecture (ZTA), Artificial Intelligence (AI), Machine Learning (ML), cloud security, and cybersecurity modernization initiatives.
• Prepare responses, supporting documentation, and corrective action plans for:
  • Federal Information Security Modernization Act (FISMA) audits
  • Office of Inspector General (OIG) audits
  • Joint Compliance Inspection Program (JCIP) reviews
  • Intelligence Community oversight activities
• Develop executive-level communications, policy memoranda, briefing papers, white papers, reports, and PowerPoint presentations for the CISO, senior executives, and DHS Intelligence Enterprise leadership.
• Present cybersecurity governance updates during executive leadership meetings, Intelligence Community Oversight Program (ICOP) sessions, governance boards, and cybersecurity working groups.
• Monitor cybersecurity policy compliance across DHS Intelligence Enterprise Components and prepare compliance status reports, metrics, and executive dashboards.
• Manage and maintain cybersecurity governance content on A-LAN and C-LAN SharePoint portals, ensuring policies, standards, guidance, and reference materials remain current.
• Maintain centralized governance calendars, working group schedules, action item trackers, and policy repositories.
• Represent DHS Intelligence Enterprise in Intelligence Community cybersecurity governance working groups, interagency meetings, and collaborative policy initiatives.
• Provide mentorship and technical guidance to junior governance analysts and cybersecurity policy specialists.

Minimum Qualifications

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
• Minimum 10 years of progressively responsible experience in cybersecurity governance, policy development, information assurance, or cybersecurity compliance supporting Federal Government or Intelligence Community programs.
• Demonstrated expertise in:
  • Cybersecurity governance
  • Policy development
  • Regulatory compliance
  • Information assurance
  • Risk Management Framework (RMF)
  • Security policy implementation
• Expert knowledge of:
  • NIST SP 800-53
  • NIST Risk Management Framework (RMF)
  • CNSSI 1253
  • ICD 503
  • DHS Sensitive Systems Policy Directive 4300C
  • Intelligence Community cybersecurity policies and overlays
• Demonstrated experience translating complex Federal and Intelligence Community cybersecurity requirements into practical organizational policies, standards, and implementation guidance.
• Experience supporting cybersecurity audits, inspections, compliance reviews, and corrective action planning.
• Exceptional technical writing, analytical, and verbal communication skills with demonstrated experience preparing executive-level reports, presentations, policy memoranda, and briefing materials.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, Public Administration, Political Science, or a related discipline.
• Master's degree is preferred.

Preferred Qualifications

• Current Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
• Certified Authorization Professional (CAP) certification.
• Experience supporting DHS Intelligence & Analysis (I&A) or other Intelligence Community cybersecurity organizations.
• Experience supporting Federal Information Security Modernization Act (FISMA) audits, Office of Inspector General (OIG) reviews, and Joint Compliance Inspection Program (JCIP) assessments.
• Experience with Governance, Risk, and Compliance (GRC) platforms such as RSA Archer.
• Experience supporting cybersecurity governance initiatives involving Zero Trust Architecture (ZTA), Artificial Intelligence (AI), cloud security, and Supply Chain Risk Management (SCRM).
• Experience managing SharePoint collaboration sites and enterprise governance repositories.

Required Certifications

The following current certification is required:

• Certified Information Systems Security Professional (CISSP) or
• Certified Information Security Manager (CISM)

Preferred certification:

• Certified Authorization Professional (CAP)

Clearance Requirement

Active Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance Required