Cybersecurity Technical Writer

3. Position Description and Job Skill SetDescription of the job functions the contractor will be expected to perform.The contractor willdevelop, revise, and maintain information security governance documentation. The work includes creating technically accurate, enforceable documentation aligned with cybersecurity frameworks and organizational objectives.Primary responsibilities include:Develop and revise information security policiesDevelop technical standards supporting approved security policies.Develop operational procedures and implementation of guidance.Create security baselines and configuration documentation.Develop compliance documentation for technical accuracy, consistency, completeness, and enforceability.Recommend improvements to governance documentation structure and organization.Produce cleardocumentation suitable for technical staff,management, auditors, andexternal reviewers.Work withsubject matter experts to accurately document existing processes and required controls.Maintain document version control andsupport periodic review.Required Skills/ExperienceProvide the minimum required skills and/or experience the contractor must possess to qualify for this position. These requirements will be transferred to the ScoreSheet and candidates without these requirements reflected on theirresume willNOT be presented to the manager for consideration.Technical writingexperience involving cybersecurity or IT governance.Demonstrated experience with several of the following:NIST Cybersecurity FrameworkNIST SP 800-53IRS Publication 1075CIS Critical Security ControlsSecurity governance and risk managementIdentity andAccess ManagementIncident ResponseVulnerability ManagementDisaster Recovery and Business ContinuityVendor Risk ManagementSecurity Awareness and TrainingPolicy Lifecycle ManagementPreferred/Not RequiredProvide any skills/experience thatwould be helpfulfor the candidate to possess but not required. Examples: Previous supervisoryexperience, WebLogic experience helpful, etc.Experience writingdocumentation aligned with NIST Cybersecurity Framework, NIST SP 800-53, and IRS Publication 1075CISSP, CISA,CGRC, Security+, or equivelant certifications.