Cyber Policy Analyst / Technical Writer

Menu

• Who We Are

• Our Company Our mission is simple, our vision is clear, and our values are strong.

• Our Team Our people are our greatest asset — they will be one of yours as well.

• Our Joint Venture AdvanceX combines Noblis ESI R&D with Assurit cybersecurity expertise.

• Our Clients We are a nationwide trusted partner to the public and private sectors.

• Awards & Accomplishments Follow our journey as we work for the advancement of cybersecurity.

• Press Contract awards, strategic partnerships, and mission-driven milestones.

• What We Do

• Implementation & Advisory Develop and implement sustainable security strategies

• Risk Management Solutions

• Governance & Cyber Program Development

• Third-Party Security

• Privacy & Data Protection

• Assessment & Compliance Anticipate and alleviate risks that can threaten your business

• Audit Readiness

• Penetration Testing

• Vulnerability Scanning & Assessments

• Security Assessment & Authorization (SA&A)

• Incident & Threat Management Prevent, manage and recover from security incidents

• Data Breach Readiness

• Tabletop & Simulated Exercises

• Incident Response

• Threat Hunting

• Security Architecture & Engineering Build, deploy and monitor effective cyber safeguards

• Cloud Security

• Continuous Monitoring

• Business Continuity & Disaster Recovery

• Enterprise Mobility

• Capabilities

• Our Capabilities Discover Assurit’s ability to deliver tailored and effective solutions to your most complex cybersecurity challenges.

• Small Business Certifications

• Quality Initiatives

• NAICS / Product & Service Codes

• Certifications & Contract Vehicles

• Core Capabilities & Staff Qualifications

• Our Capabilities Our proven methodologies will tackle your most complex challenges.

• Case Studies Our extensive experience demonstrates our ability to drive measurable impact.

• Capability Statement (PDF) Download our PDF Capability Statement

• Contract Vehicles

• SBA 8(a) Certified SBA 8(a) Sole-Source and Competitive

• GSA Schedule GSA Multiple Award Schedule (MAS)

• NASA SEWP VI Solutions for Enterprise-Wide Procurement

• GSA 8(a) STARS III GSA 8(a) STARS III

• NASPO ValuePoint NASPO ValuePoint

• MDA SHIELD IDIQ MDA SHIELD

• SeaPort NxG Navy SeaPort Next Generation (NxG)

• eFAST FAA eFAST

• Maryland CATS+ Maryland CATS+

• Careers

• Contact

• CMMC L2

• SBA 8(a)

• ISO 9001

• ISO 27001

• ISO 20000-1

• CMMI-SVC ML3 v2.0

• CAGE 6VE87

• UEI DL3JL6J1XG98

Assurit Cybersecurity

Cyber Policy Analyst / Technical Writer

• On site, Washington, DC
• Posted on October 5, 2026

Assurit Assurit is currently seeking an experienced Cyber Policy Analyst / Technical Writer to support one of our clients.

About The Role You will own the cybersecurity policy program for a federal civilian agency. You will write, review and manage security, privacy and records-management policies and procedures. You will also be the program’s advisor on policy questions. The customer’s environment includes FISMA systems, ranging from cloud platforms to operational technology environments.

Location: On site, Washington, DC

Key Responsibilities

• Develop, review and manage security documents so that they are high quality and meet customer standards.
• Advise the cybersecurity program on policy matters.
• Maintain cybersecurity, privacy and records-management policies, SOPs and related documents, following federal correspondence, style and branding standards.
• Review every policy, procedure and SOP each year against government-wide and customer guidance on IT security, privacy and records management, and update them.
• Find gaps in existing policies, procedures and guides, recommend fixes, and carry out the approved fixes.
• Write new policy and documentation as new requirements come up, such as executive orders, OMB memos, NIST revisions and agency directives.
• Build a cybersecurity core services catalog.
• Review, update and maintain the customer’s security control catalog and Minimum Security Parameters.
• Build and run a cybersecurity document repository with version control and publishing.
• Run an annual gap analysis of the policy and governance program and report on its maturity.
• Turn requirements from FISMA, the NIST SP 800 series, OMB A-130 and agency directives into clear, enforceable policy.
• Work with ISSOs, assessors, privacy and audit staff so that policy matches how the RMF, continuous monitoring, POA&M and incident response processes actually run.
• Prepare briefings and presentations on policy changes for the CISO and system owners.

Required Qualifications

• Bachelor’s degree in computer science or an IT-related field
• 10+ years writing, reviewing, researching and editing security and technical documents and presentations
• 10+ years of related information security experience
• CISSP or an equivalent certification. Equivalent means it covers a similar level of information security domains, or a similar depth of knowledge or experience. Assurit accepts CISSP, CISM, CISA or CGRC.
• Hands-on information security policy and procedure development under FISMA and the NIST SP 800 series
• Working knowledge of RMF, POA&M management and security assessments or audits
• U.S. citizen, able to pass a High Risk background investigation
• Able to work on site in Washington, DC during core hours, 8:00 AM-4:00 PM

Preferred Qualifications

• Experience writing policy for a federal civilian agency or other regulated organization
• Has built or maintained a NIST 800-53 Rev 5 control catalog or an organization-defined parameter baseline
• Experience with the policy and compliance modules in ServiceNow GRC/IRM
• Has written policy covering OT, SCADA or industrial control systems
• Plain-language writing and editing; federal correspondence style
• Experience writing Zero Trust or cloud security policy
• Active Tier 5 or Top Secret investigation

Apply for Position

Working at Assurit

Assurit is an award winning, certified small business headquartered in Fairfax, VA. We offer a highly competitive compensation and benefits package inclusive of medical and dental coverage, as well as paid time off. Founded in 2013, Assurit has become a trusted provider of cybersecurity expertise to customers across federal, state and local governments, as well as the commercial sector. We are an employee-centric organization that focuses on the growth and development of our greatest asset – our people. We believe that if our Team is trained and educated, we will always be able to deliver our promise of customer success. If you enjoy work environments focused on continuous learning and growth, Assurit will be a great fit for you.

Whether you saw a specific job opening of ours or are simply interested in learning more about building your career at Assurit, feel free submit your resume. Based on your request, the appropriate individual within our organization will get back to you within 2 business days.

Assurit is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. To apply for this job email your resume to [email protected]

Spread the Word

open positions

• Cyber Policy Analyst / Technical Writer
• Human Risk Manager / Cybersecurity Awareness Professional SME
• PMO Analyst
• Senior RMF Security Analyst
• Enterprise Asset Management & Data Quality SME
• Enterprise Interface Specialist
• Data Engineering & Reconciliation Specialist
• IT Audit Remediation Analyst
• QA Tester – SailPoint IdentityIQ / IAM Automation
• Mid-Level SailPoint IdentityIQ Developer (ICAM)
• Senior SailPoint IdentityIQ Developer (ICAM)
• Senior Network Defense Analyst
• Cyber Tools Senior Test & Evaluation Engineer
• Sr. Systems Engineer / Integrator
• Cyber Capabilities Technical Program Manager

How can we meet your needs?

Speak to a member of our leadership team today.

Let’s Connect

Assurit

11325 Random Hills Road

Suite 360

Fairfax, VA 22030

(703) 225-3305

(703) 226-6201 (fax)

[email protected]

SBA 8(a), ISO 9001:2015, ISO/IEC 27001:2022, ISO/IEC 20000-1:2018, CMMI-SVC ML3 v2.0, CMMC L2, NAICS & PSC CODES

• Implementation & Advisory

• Risk Management Solutions

• Governance & Cyber Program Development

• Third-Party Security

• Privacy & Data Protection

• Assessment & Compliance

• Audit Readiness

• Penetration Testing

• Vulnerability Scanning & Assessments

• Security Assessment & Authorization (SA&A)

• Incident & Threat Management

• Data Breach Readiness

• Tabletop & Simulated Exercises

• Incident Response

• Threat Hunting

• Security Architecture & Engineering

• Cloud Security

• Continuous Monitoring

• Business Continuity & Disaster Recovery

• Enterprise Mobility

recent articles

• Assurit Awarded NASA SEWP VI Contract in Categories B and C By Denise L. Pho
• Assurit's 8(a) STARS III Contract Extended Through 2029 By Denise L. Pho
• Assurit Achieves CMMC Level 2 Certification Following Independent C3PAO Assessment By Denise L. Pho
• Capability Statement (PDF)
• Blog
• Career Opportunities
• Sitemap

©2026 Assurit All Rights Reserved

Site by Cara Cairns Design, Inc.

Capability PDF

Contact

Contact

(703) 225-3305 M - F, 8am - 6pm

Message

Same or Next Business Day Response

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Δ