Cybersecurity Technical Writer Associate Director

Partner with cybersecurity subject matter experts to capture technical workflows, identify documentation gaps, and ensure procedures reflect current operating practices. Working knowledge of cybersecurity operations such as incident response, penetration testing, red teaming, threat hunting, insider risk, and vulnerability management.

Kforce has a client in Jersey City, NJ that is seeking a Cybersecurity Technical Writer Associate Director. Responsibilities:

• Develop, maintain, and govern cybersecurity policies, standards, procedures, SOPs, runbooks, playbooks, and supporting job aids
• Translate cybersecurity operations, regulatory requirements, control expectations, and technical processes into clear, consistent, audit-ready documentation
• Establish and maintain documentation standards covering templates, naming conventions, ownership, version control, approvals, review cycles, exceptions, and document retirement
• Create practical operational materials such as checklists, quick-reference guides, decision trees, process flows, and instructional documentation
• Partner with cybersecurity subject matter experts to capture technical workflows, identify documentation gaps, and ensure procedures reflect current operating practices
• Maintain clear relationships and traceability between policies, standards, procedures, controls, and supporting documentation
• Map cybersecurity documentation to applicable regulatory, audit, and security control requirements
• Support internal audits, regulatory examinations, and evidence requests by maintaining complete and easily traceable documentation
• Perform documentation gap assessments when regulations, technologies, security processes, or organizational requirements change
• Manage cybersecurity documentation within established repositories and maintain accurate review schedules
• Develop and maintain documentation style guidelines and terminology standards
• Coordinate document drafting, stakeholder reviews, approvals, publication, and ongoing updates
• Track documentation status, outstanding actions, review dates, and governance metrics for leadership reporting

Requirements:

• Bachelor's degree in Technical Writing, Communications, English, Information Security, or a related discipline, or equivalent professional experience
• 7+ years of experience developing technical documentation, policies, standards, procedures, or similar controlled documentation
• 3+ years of experience supporting cybersecurity, information security, IT risk, compliance, or a regulated financial services environment
• Demonstrated experience establishing or managing a formal document governance program, including templates, document hierarchy, versioning, approval workflows, and recurring reviews
• Experience creating process maps and visual documentation using Visio, Lucidchart, or similar tools
• Experience working with SharePoint document management functionality, including metadata and version control
• Strong understanding of the distinctions between policies, standards, procedures, guidelines, runbooks, and job aids
• Working knowledge of cybersecurity operations such as incident response, penetration testing, red teaming, threat hunting, insider risk, and vulnerability management
• Familiarity with security and compliance frameworks including NIST SP 800-53, NIST Cybersecurity Framework (CSF), MITRE ATT&CK, and ISO 27001
• Familiarity with financial services security and regulatory expectations, including FFIEC and SEC requirements, is preferred
• Advanced proficiency with Microsoft Word, Excel, PowerPoint, Outlook, and SharePoint
• Exceptional technical writing and editing skills with the ability to produce clear, concise, and actionable documentation
• Strong organizational skills with the ability to manage multiple documents, deadlines, reviews, and stakeholder inputs simultaneously
• Strong attention to detail and sound judgment when working with confidential or security-sensitive information
• Security+, CISSP, CISA, CRISC, CPTC, or similar cybersecurity, audit, risk, or technical communication certification is preferred