• Technical writing experience involving cybersecurity or IT governance


• Demonstrated experience with several of the following:
  • NIST Cybersecurity Framework
  • NIST SP 800-53
  • IRS Publication 1075
  • CIS Critical Security Controls
  • Security governance and risk management
  • Identity and Access Management
  • Incident Response
  • Vulnerability Management
  • Disaster Recovery and Business Continuity
  • Vendor Risk Management
  • Security Awareness and Training
  • Policy Lifecycle Management

PREFERRED SKILLS:

• Experience writing documentation aligned with NIST Cybersecurity Framework, NIST SP 800-53, and IRS Publication 1075


• CISSP, CISA, CGRC, Security+, or equivalent certifications

The contractor will develop, revise, and maintain information security governance documentation. The work includes creating technically accurate, enforceable documentation aligned with cybersecurity frameworks and organizational objectives.

Primary responsibilities include:

• Develop and revise information security policies


• Develop technical standards supporting approved security policies.


• Develop operational procedures and implementation of guidance.


• Create security baselines and configuration documentation.


• Develop compliance documentation for technical accuracy, consistency, completeness, and enforceability.


• Recommend improvements to governance documentation structure and organization.


• Produce clear documentation suitable for technical staff, management, auditors, and external reviewers.


• Work with subject matter experts to accurately document existing processes and required controls.


• Maintain document version control and support periodic review.

 

Period of Performance: Until 8/17/2029

Location: 100% Onsite in Jackson, MS

IMPORTANT: This posting is for MDHS which requires a fingerprint screen.  The process to obtain a fingerprint screen is extremely slow and it could take a month to get the results.  Do NOT submit candidates that need to start tomorrow, it's better to submit candidates that have a contract ending over the next month and is currently working.  If they need to give a notice do NOT have them give their notice after accepting the offer, wait until the fingerprint results are returned and then have them give their notice.