Posted today
Secret
Unspecified
IT - Security
Cybersecurity Policy Team Lead – Defense Health Agency (DHA)
Location: Remote
Clearance Level: Active Secret Security Clearance
Summary:
We are seeking a highly experienced and knowledgeable Cybersecurity Policy Team Lead to oversee and manage all IT and cybersecurity policy-related aspects for the Defense Health Agency (DHA). This role is responsible for developing, implementing, and maintaining enterprise cybersecurity policies that align with DoD and DHA regulations, federal standards, and IT governance best practices.
The Policy Team Lead serves as the senior leader responsible for authoritative policy authorship, enterprise governance leadership, and strategic oversight of cybersecurity compliance across the Military Health System (MHS). Reporting directly to the DHA PEO MED SYS (J-6) Policy Lead, this position oversees a team of cybersecurity policy analysts and GRC professionals, ensuring policies are clear, actionable, and consistently implemented across clinical systems, medical devices, cloud environments, and enterprise IT.
Services to be performed include, but are not limited to:
Cybersecurity Policy Leadership (Primary Focus):
• Lead and manage a team responsible for drafting, revising, and publishing DHA IT and cybersecurity policies, standards, and procedural guidance.
• Oversee the full policy lifecycle to ensure policies are clear, authoritative, and aligned with DoD, federal, and healthcare cybersecurity requirements.
• Translate complex cybersecurity directives into DHA-specific policy supporting clinical systems, medical devices, cloud environments, and enterprise health IT.
• Serve as the senior advisor on cybersecurity policy interpretation, providing expert guidance to the J-6 Policy Lead and DHA leadership.
Standards Alignment & Enterprise Integration:
• Ensure DHA cybersecurity policies align with NIST SP 800-series standards, DoD directives and instructions, and federal health IT requirements.
• Harmonize cybersecurity policy across clinical systems, medical devices, cloud platforms, and enterprise networks.
• Monitor emerging cybersecurity trends, regulatory changes, and threat landscapes to proactively update governance and policy frameworks.
Team Leadership & Stakeholder Engagement:
• Supervise, mentor, and develop a team of cybersecurity policy analysts and GRC professionals.
• Coordinate with subject matter experts, engineers, process owners, and clinical IT teams to ensure policy adoption and compliance.
• Lead enterprise-wide communication efforts for new or updated cybersecurity policies, including briefings, training, and outreach.
• Foster a collaborative environment that supports consistent policy interpretation and implementation across DHA.
Required Education and Experience:
• Twelve (12) to fifteen (15) years of hands-on experience in Information Technology and Cybersecurity.
• Extensive experience developing and leading cybersecurity policy, governance, or GRC programs.
• Strong understanding of DoD cybersecurity directives, NIST SP 800-series standards, and federal cybersecurity governance.
• Demonstrated leadership experience managing teams or leading enterprise-level policy initiatives.
• Familiarity with DHA, MHS, or healthcare IT cybersecurity environments.
• Exceptional technical writing, communication, and analytical skills.
Required Certification(s):
• DoD 8570/8140 IAT II and IAM I (e.g., Security+ CE).
Preferred Qualifications:
• Bachelor’s or Master’s degree in a related field.
• Experience leading cybersecurity governance or policy development within DHA or other DoD organizations.
• Knowledge of medical device cybersecurity, clinical systems, or HIPAA-related security considerations.
Clearance Level:
Active Secret Security Clearance (Required)
Benefits at 3 Reasons Consulting:
At 3 Reasons Consulting, we are committed to supporting the well-being of our team with a comprehensive benefits package that includes both company-paid and shared-cost options. Our benefits are designed to enhance your health, financial security, and work-life balance to help you thrive personally and professionally as a valued member of our team.
Company-Paid Benefits:
Short/Long Term Disability
Basic Life Insurance
Direct Payroll Deposit
Leave Accrual
Holidays
401(k) Match
Employee / Company Shared Benefits:
Additional (Voluntary) Life Insurance
401(k)
Medical Coverage
Dental Coverage
Vision Care Plan
Flexible Spending Account Plan
An Equal Opportunity Employer
3 Reasons Consulting is an Equal Opportunity Employer. We are committed to providing a workplace free from discrimination or harassment and hold all employees accountable to protect this mission. We do not discriminate on the basis of race, color, gender, religion, national origin, sexual orientation, age, marital status, veteran status, military status, disability status, or any other characteristic protected by federal, state, or local law.
Location: Remote
Clearance Level: Active Secret Security Clearance
Summary:
We are seeking a highly experienced and knowledgeable Cybersecurity Policy Team Lead to oversee and manage all IT and cybersecurity policy-related aspects for the Defense Health Agency (DHA). This role is responsible for developing, implementing, and maintaining enterprise cybersecurity policies that align with DoD and DHA regulations, federal standards, and IT governance best practices.
The Policy Team Lead serves as the senior leader responsible for authoritative policy authorship, enterprise governance leadership, and strategic oversight of cybersecurity compliance across the Military Health System (MHS). Reporting directly to the DHA PEO MED SYS (J-6) Policy Lead, this position oversees a team of cybersecurity policy analysts and GRC professionals, ensuring policies are clear, actionable, and consistently implemented across clinical systems, medical devices, cloud environments, and enterprise IT.
Services to be performed include, but are not limited to:
Cybersecurity Policy Leadership (Primary Focus):
• Lead and manage a team responsible for drafting, revising, and publishing DHA IT and cybersecurity policies, standards, and procedural guidance.
• Oversee the full policy lifecycle to ensure policies are clear, authoritative, and aligned with DoD, federal, and healthcare cybersecurity requirements.
• Translate complex cybersecurity directives into DHA-specific policy supporting clinical systems, medical devices, cloud environments, and enterprise health IT.
• Serve as the senior advisor on cybersecurity policy interpretation, providing expert guidance to the J-6 Policy Lead and DHA leadership.
Standards Alignment & Enterprise Integration:
• Ensure DHA cybersecurity policies align with NIST SP 800-series standards, DoD directives and instructions, and federal health IT requirements.
• Harmonize cybersecurity policy across clinical systems, medical devices, cloud platforms, and enterprise networks.
• Monitor emerging cybersecurity trends, regulatory changes, and threat landscapes to proactively update governance and policy frameworks.
Team Leadership & Stakeholder Engagement:
• Supervise, mentor, and develop a team of cybersecurity policy analysts and GRC professionals.
• Coordinate with subject matter experts, engineers, process owners, and clinical IT teams to ensure policy adoption and compliance.
• Lead enterprise-wide communication efforts for new or updated cybersecurity policies, including briefings, training, and outreach.
• Foster a collaborative environment that supports consistent policy interpretation and implementation across DHA.
Required Education and Experience:
• Twelve (12) to fifteen (15) years of hands-on experience in Information Technology and Cybersecurity.
• Extensive experience developing and leading cybersecurity policy, governance, or GRC programs.
• Strong understanding of DoD cybersecurity directives, NIST SP 800-series standards, and federal cybersecurity governance.
• Demonstrated leadership experience managing teams or leading enterprise-level policy initiatives.
• Familiarity with DHA, MHS, or healthcare IT cybersecurity environments.
• Exceptional technical writing, communication, and analytical skills.
Required Certification(s):
• DoD 8570/8140 IAT II and IAM I (e.g., Security+ CE).
Preferred Qualifications:
• Bachelor’s or Master’s degree in a related field.
• Experience leading cybersecurity governance or policy development within DHA or other DoD organizations.
• Knowledge of medical device cybersecurity, clinical systems, or HIPAA-related security considerations.
Clearance Level:
Active Secret Security Clearance (Required)
Benefits at 3 Reasons Consulting:
At 3 Reasons Consulting, we are committed to supporting the well-being of our team with a comprehensive benefits package that includes both company-paid and shared-cost options. Our benefits are designed to enhance your health, financial security, and work-life balance to help you thrive personally and professionally as a valued member of our team.
Company-Paid Benefits:
Short/Long Term Disability
Basic Life Insurance
Direct Payroll Deposit
Leave Accrual
Holidays
401(k) Match
Employee / Company Shared Benefits:
Additional (Voluntary) Life Insurance
401(k)
Medical Coverage
Dental Coverage
Vision Care Plan
Flexible Spending Account Plan
An Equal Opportunity Employer
3 Reasons Consulting is an Equal Opportunity Employer. We are committed to providing a workplace free from discrimination or harassment and hold all employees accountable to protect this mission. We do not discriminate on the basis of race, color, gender, religion, national origin, sexual orientation, age, marital status, veteran status, military status, disability status, or any other characteristic protected by federal, state, or local law.
group id: 91091531
