Cybersecurity Technical Writer (Governance, Policies, and Plans)
This role is responsible for developing clear, accurate, and compliant cybersecurity documentation that satisfies all RFQ requirements. It ensures every policy, procedure, and security plan aligns with Florida Cybersecurity Standards, Florida Department of Environmental Protection (DEP) directives (DEP 390 and DEP 422), and the applicable NIST frameworks.
Expanded Responsibilities
Collaborate with analysts and the technical architect to convert technical observations, assessment results, and system details into clear, well-structured documentation.
Ensure all deliverables comply with the RFQ’s formatting, clarity, and content standards, including required Microsoft Word templates, PDF formatting, and submission guidelines.
Contribute to the development and refinement of key documents, including the User Access Policy (D7), Information Security Procedures (D4), policy updates (D5), the Vulnerability Management Plan (D11), the Change Management Plan (D12), and MFA recommendations (D9).
Support the drafting and editing of System Security Plans (D8) and Data Flow Baseline documentation (D10) to ensure accuracy and consistency.
Maintain cross-document consistency, including standardized terminology, regulatory references, and alignment with DEP policies.
Participate in weekly meetings, status reviews, and onsite collaboration sessions as required to gather information and confirm document accuracy.
Required & Preferred Qualifications
Experience:
Bachelor’s or Master’s in Computer Science, Cybersecurity, Information Technology, or Information Security. Degrees in related technical fields like Engineering (Computer/Electrical), Information Assurance, or Data Analytics are also relevant.
5+ years in cybersecurity technical writing, policy development, or documentation for regulated environments.
Certifications:
CISA, CISSP, or Security+ (Security+ minimum; CISSP preferred for technical accuracy).
Knowledge/Skills:
Demonstrated experience translating NIST CSF, NIST 800-53, and state cybersecurity requirements into policy and procedural documents.
At least one year of experience writing or revising documents aligned to 60GG-2 and §282.318 F.S.
Strong editorial and version-control practices