Zero Trust Policy Specialist/Analyst

Herndon, Virginia

Security - Security Analysis

Contract

Zero Trust Policy Analyst
Location: Herndon, VA (Hybrid – 3 days per week onsite)
Contract: 12 months

Our client, a leading Digital Transformation services company, are hiring an accomplished Policy Analyst with specialized expertise in Zero Trust technology and a strong background supporting federal government initiatives. This role will focus on developing, analyzing and implementing policies aligned with Zero Trust principles to bolster cybersecurity within government systems.

Responsibilities

Lead the development and refinement of Zero Trust security policies, guidelines and standards tailored to federal government requirements and aligned with cybersecurity best practices.
Monitor and interpret federal cybersecurity regulations, policies and frameworks, ensuring policies adhere to government mandates while incorporating Zero Trust methodologies.
Conduct comprehensive analysis and assessments of existing policies, identifying gaps and recommending enhancements.
Align policies with Zero Trust principles and government cybersecurity standards.
Collaborate with stakeholders to facilitate the implementation of Zero Trust policies, providing guidance, training and support to ensure proper adoption and adherence across government agencies.

Skillset

In-depth expertise in Zero Trust frameworks, principles and architectures (e.g., NIST SP 800-207).
Comprehensive knowledge of federal cybersecurity regulations, policies and compliance frameworks (e.g. NIST, FISMA, FedRAMP).
Proven experience in policy analysis, gap assessments and compliance evaluations within federal or other highly regulated environments.
Skilled in developing, refining and implementing security policies that align with both organisational objectives and federal mandates.
Strong stakeholder engagement and communication abilities, adept at simplifying and conveying complex cybersecurity concepts into actionable policy guidance.
Solid grounding in risk management, governance and compliance practices.
Previous experience in federal consulting or cybersecurity policy roles is highly desirable.