IT Policy/Legislative Specialist

About Banduri

Banduri helps organizations execute digital transformations with agility so that continuous innovation becomes their core competency. Core to Banduri's values and culture is the belief that everyone deserves to thrive. Our mission is to leave things better than we found them, make things that matter, and help our customers harness the power of change. We know that to do this requires radical candor, a dedicated focus on the users, and creativity. There are no big egos here. We are collaborators and team players. We want solutions-oriented problem solvers, critical thinkers, and committed creators that are passionate about what they do.

We are currently hiring an IT POLICY/LEGISLATIVE SPECIALIST to support the modernization efforts of a federal agency. 

MUST BE A US CITIZEN AND PASS BACKGROUND CHECK

Position Location:

This position offers hybrid work options. Our office is in Fredericksburg, VA right next to the Fredericksburg (FBG) Amtrak/VRE station.

Position Description:

Responsible for advising and developing documents in support of best practices, resource packets, enterprise standards, cybersecurity strategies, policy, and other strategic cybersecurity guidance efforts.

Key Responsibilities:

·       Research the government- and private-industry-wide cybersecurity policy documents to provide advisory support for the development of organizational guidance

·       Actively monitor open-source government and private cybersecurity relevant guidance documents daily, and document any changes and how they relate to the organization

·       Provide 1-page executive summaries of the latest government cybersecurity frameworks, including but not limited to those published by National Institute of Standards and Technology (NIST) within one week of the newly released guidance

·       Provide 1-page executive summaries of the latest private cybersecurity frameworks including but not limited to the MITRE ATT&CK framework within one week of the newly released guidance

·       Provide recommendations and suggestions on a weekly basis on the existing government and private cybersecurity industry best practices, standards, policies, frameworks, and other relevant guidance related material

·       Draft, review, and provide edits to technical best practices and resource packets based on current cybersecurity-related events (e.g., SIM swapping threats)

·       Participate in annual review of existing documentation

·       Draft and provide written recommendations and edits to cybersecurity strategies based on a comparison of current cybersecurity posture to government and private cybersecurity industry standards

·       Align all written guidance documents to the organization’s strategic goals and modernization strategy

·       Review and provide written recommendations to enterprise technical standards and IT security policy that govern the organization

·       Collaborate verbally and in written form to align guidance for publication to the organization

·       Provide written recommendations on Government drafts of executive summaries and briefings

·       Draft and provide recommendations and input on other guidance content and the creation of briefings

Required Experience:

·       Bachelor’s degree in Public Policy, Information Technology, Information Systems, Cybersecurity, or related field

·       10 years of experience working on executive-level briefing materials

·       10 years of experience working with highly technical information (e.g., policy, legislation, standards, etc.), with at least 5 years specifically in cybersecurity-related information (i.e., governance, risk, and compliance)

·       Sound foundation in grammar, punctuation, and use of the English language, with emphasis on producing clear, direct prose

·       10 years of expertise using Microsoft Office tools (Word, PowerPoint, Excel, Teams)

Banduri is committed to a diverse and inclusive workplace. Banduri is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.