Cybersecurity Technical Writer Associate Director

RESPONSIBILITIES

• Develop, maintain, and govern cybersecurity policies, standards, procedures, SOPs, runbooks, playbooks, and supporting job aids
• Translate cybersecurity operations, regulatory requirements, control expectations, and technical processes into clear, consistent, audit-ready documentation
• Establish and maintain documentation standards covering templates, naming conventions, ownership, version control, approvals, review cycles, exceptions, and document retirement
• Create practical operational materials such as checklists, quick-reference guides, decision trees, process flows, and instructional documentation
• Partner with cybersecurity subject matter experts to capture technical workflows, identify documentation gaps, and ensure procedures reflect current operating practices
• Maintain clear relationships and traceability between policies, standards, procedures, controls, and supporting documentation
• Map cybersecurity documentation to applicable regulatory, audit, and security control requirements
• Support internal audits, regulatory examinations, and evidence requests by maintaining complete and easily traceable documentation
• Perform documentation gap assessments when regulations, technologies, security processes, or organizational requirements change
• Manage cybersecurity documentation within established repositories and maintain accurate review schedules
• Develop and maintain documentation style guidelines and terminology standards
• Coordinate document drafting, stakeholder reviews, approvals, publication, and ongoing updates
• Track documentation status, outstanding actions, review dates, and governance metrics for leadership reporting

REQUIREMENTS

• Bachelor's degree in Technical Writing, Communications, English, Information Security, or a related discipline, or equivalent professional experience
• 7+ years of experience developing technical documentation, policies, standards, procedures, or similar controlled documentation
• 3+ years of experience supporting cybersecurity, information security, IT risk, compliance, or a regulated financial services environment
• Demonstrated experience establishing or managing a formal document governance program, including templates, document hierarchy, versioning, approval workflows, and recurring reviews
• Experience creating process maps and visual documentation using Visio, Lucidchart, or similar tools
• Experience working with SharePoint document management functionality, including metadata and version control
• Strong understanding of the distinctions between policies, standards, procedures, guidelines, runbooks, and job aids
• Working knowledge of cybersecurity operations such as incident response, penetration testing, red teaming, threat hunting, insider risk, and vulnerability management
• Familiarity with security and compliance frameworks including NIST SP 800-53, NIST Cybersecurity Framework (CSF), MITRE ATT&CK, and ISO 27001
• Familiarity with financial services security and regulatory expectations, including FFIEC and SEC requirements, is preferred
• Advanced proficiency with Microsoft Word, Excel, PowerPoint, Outlook, and SharePoint
• Exceptional technical writing and editing skills with the ability to produce clear, concise, and actionable documentation
• Strong organizational skills with the ability to manage multiple documents, deadlines, reviews, and stakeholder inputs simultaneously
• Strong attention to detail and sound judgment when working with confidential or security-sensitive information
• Security+, CISSP, CISA, CRISC, CPTC, or similar cybersecurity, audit, risk, or technical communication certification is preferred