Technical Writer - Information Technology Security
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
Job description
The contractor will develop, revise, and maintain information security governance documentation. The work includes
creating technically accurate, enforceable documentation aligned with cybersecurity frameworks and organizational
objectives.
Primary responsibilities include:
-
Develop and revise information security policies
-
Develop technical standards supporting approved security policies.
-
Develop operational procedures and implementation of guidance.
-
Create security baselines and configuration documentation.
-
Develop compliance documentation for technical accuracy, consistency, completeness, and enforceability.
-
Recommend improvements to governance documentation structure and organization.
-
Produce clear documentation suitable for technical staff, management, auditors, and external reviewers.
-
Work with subject matter experts to accurately document existing processes and required controls.
-
Maintain document version control and support periodic review.
Technical writing experience involving cybersecurity or IT governance.
Requirements
Demonstrated experience with several of the following:
-
NIST Cybersecurity Framework
-
NIST SP 800-53
-
IRS Publication 1075
-
CIS Critical Security Controls
-
Security governance and risk management
-
Identity and Access Management
-
Incident Response
-
Vulnerability Management
-
Disaster Recovery and Business Continuity
-
Vendor Risk Management
-
Security Awareness and Training
-
Policy Lifecycle Management
Experience writing documentation aligned with NIST Cybersecurity Framework, NIST SP 800-53, and IRS Publication
1075
- CISSP, CISA, CGRC, Security+, or equivelant certifications
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on www.indeed.comGood distractions
Talks and stories from around this role — technically off-topic, practically not.
Moments
Explore playlistsVideos
See allRelated articles
See all
Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.
Walking Into The Era of Supply Chain Risks
Understanding and Mitigating Common Web Vulnerabilities
7 Best Steps For Writing Good Software Technical Documentation