ZipRecruiter

Log In

1

Cyber Security Policy Writer Jobs (NOW HIRING)

Booz Allen Hamilton

Cyber Policy Writer

Arlington, VA

$55.20K - $126K/yr

When our country's cybersecurity is on the line, simply reacting is not enough-we need a plan. And when that plan needs to protect information technology infrastructure, we need strategic policy ...

gTANGIBLE

Cybersecurity Policy Lead

Washington, DC · On-site

Cybersecurity Policy Lead Location: Washington, DC Clearance: Secret Duties and Responsibilities ... Experience communicating effectively, both oral and written, with technical, non-technical, and ...

Booz Allen Hamilton

Cyber Policy Writer

Arlington, VA · On-site

$55.20K - $126K/yr

When our country's cybersecurity is on the line, simply reacting is not enough-we need a plan. And ... As a Cyber Policy Writer on our team, you'll assess the client's current cyber policies and ...

next page

Showing results 1-20

People also search for

All JobsCyber Security Policy Writer Jobs

Cyber Security Policy Writer information

See salary details

$13

$38

$66

How much do cyber security policy writer jobs pay per hour?

As of Jun 4, 2026, the average hourly pay for cyber security policy writer in the United States is $38.94, according to ZipRecruiter salary data. Most workers in this role earn between $28.85 and $47.12 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Cyber Security Policy Writer, and why are they important?

To thrive as a Cyber Security Policy Writer, you need a thorough understanding of cybersecurity principles, regulatory frameworks, and strong technical writing skills, often supported by a degree in information security or a related field. Familiarity with frameworks like NIST, ISO 27001, and tools for document management or policy automation is typically required. Attention to detail, clear communication, and the ability to translate complex technical concepts into accessible language are vital soft skills. These competencies ensure that security policies are accurate, effective, and comprehensible, helping organizations maintain compliance and manage cyber risks.

How does a Cyber Security Policy Writer collaborate with technical and non-technical teams during the policy development process?

A Cyber Security Policy Writer regularly works with both technical experts (such as IT security professionals) and non-technical stakeholders (like HR or legal teams) to ensure policies are comprehensive and practical. This collaboration involves gathering input to accurately reflect operational realities, clarify technical requirements, and address compliance needs. Effective communication and the ability to translate complex technical concepts into clear, accessible language are crucial in this role. Frequent meetings, interviews, and review sessions help ensure policies are both technically sound and easily understood by all employees.

What does a Cyber Security Policy Writer do?

A Cyber Security Policy Writer is responsible for developing, drafting, and updating policies, procedures, and guidelines that govern an organization's information security practices. They work closely with IT, legal, and compliance teams to ensure policies meet regulatory requirements and effectively address current cyber threats. Their work helps organizations protect sensitive data, mitigate risks, and maintain compliance with industry standards. The role often involves researching best practices, staying informed about evolving regulations, and communicating complex security concepts in clear, actionable language.

What is the difference between Cyber Security Policy Writer vs Cyber Security Analyst?

AspectCyber Security Policy WriterCyber Security Analyst
Required CredentialsCertifications like CISSP, CISA, or Security+; strong writing skillsCertifications like CISSP, CEH, Security+; technical analysis skills
Work EnvironmentOffice or remote; focuses on policy documentation and complianceOffice or remote; focuses on threat detection and incident response
Employer & Industry UsageUsed in organizations with compliance needs, legal teams, and security departmentsUsed in security operations centers, IT departments, and risk management teams

While both roles require cybersecurity knowledge and certifications, the Cyber Security Policy Writer primarily focuses on creating and maintaining security policies and documentation, whereas the Cyber Security Analyst concentrates on monitoring, analyzing, and responding to security threats. Both roles are essential in a comprehensive cybersecurity strategy but serve different functions within an organization.

Infographic showing various Cyber Security Policy Writer job openings in the United States as of May 2026, with employment types broken down into 23% Full Time, and 77% Part Time. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $81,001 per year, or $38.9 per hour.
Cybersecurity Policy Writer & Governance Lead

Cybersecurity Policy Writer & Governance Lead

Hp

Austin, TX

$105.05K - $161.80K/yr

Full-time

Medical, Dental, Vision, Life, PTO

Posted 3 days ago

HP rating

7.7

Company rating: 7.7 out of 10

Based on 43 frontline employees who took The Breakroom Quiz

62nd of 139 rated electronics manufacturers

Job description

Cybersecurity Policy Writer & Governance Lead

Description -

Job Summary

We are seeking a strategic and detail-drivenCybersecurity Policy Writer & Governance Leadto design, implement, and continuously enhance cybersecurity policies and governance frameworks. This role is critical in strengthening HP's security posture, ensuring regulatory compliance, and embedding risk-aware practices across the company.

The ideal candidate combines deep expertise in cybersecurity standards and regulatory requirements with the ability to translate complex technical concepts into clear, actionable, business-aligned policies. This role requires strong cross-functional collaboration, executive communication skills, and a proactive approach to risk management.

Key Responsibilities

Policy Development & Governance

  • Lead the development, review, and lifecycle management of cybersecurity policies, standards, and specifications.
  • Establish and mature governance frameworks aligned with industry-best practices and regulatory expectations.
  • Ensure policies evolve in response to emerging threats, business changes, and regulatory updates.

Regulatory Compliance & Risk Alignment

  • Maintain strong knowledge of regulatory and industry frameworks such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS V8.1, General Data Protection Regulation, and PCI DSS.
  • Ensure alignment between cybersecurity controls, enterprise risk management practices, and compliance obligations.
  • Provide authoritative guidance on policy interpretation, control implementation, and exception management.

Stakeholder Engagement

  • Partner with IT, Legal, Compliance, Risk, Audit, and business units to ensure policies are practical, enforceable, and business-aligned.
  • Influence senior leadership through reporting on governance metrics, compliance posture, and risk exposure.

Training & Awareness

  • Support the development and delivery of cybersecurity awareness and policy training programs.
  • Promote a culture of security accountability and governance maturity across the organization.

Monitoring & Reporting

  • Define and track governance KPIs and KRIs.
  • Monitor policy adherence and control effectiveness.
  • Provide executive-level reporting on compliance trends, risk insights, and remediation progress.

Qualifications

  • Bachelor's or Graduate degree in Computer Science, Information Technology, Cybersecurity, or related discipline (or equivalent experience).
  • 7-10 years of progressive experience in cybersecurity governance, policy development, risk management, or compliance.
  • Demonstrated experience drafting enterprise-level cybersecurity policies and standards.
  • Strong knowledge of global regulatory and cybersecurity control frameworks.
  • Exceptional written and verbal communication skills, with the ability to translate technical requirements into business-focused guidance.
  • Experience with policy lifecycle management tools or governance platforms preferred.
  • Professional certifications such as CISSP, CISM, CRISC, or ISO 27001/NIST-related certifications are highly desirable.
  • Working understanding of Artificial Intelligence is a plus.

Technical & Governance Expertise

  • Cybersecurity Governance & Operating Models
  • Policy & Standards Development
  • Regulatory Compliance & Audit Readiness
  • Security Controls & Control Mapping
  • Automation & Governance Tooling

Leadership & Enterprise Skills

  • Executive Communication
  • Cross-Functional Influence
  • Results Orientation
  • Learning Agility
  • Customer-Centric Mindset

Impact & Scope

  • Influences cybersecurity governance strategies across multiple teams and business units.
  • May lead projects or initiatives related to governance transformation and compliance readiness.
  • Drives enterprise-wide consistency in policy adoption and control maturity.

Complexity

  • Operates within established frameworks while addressing complex regulatory and cybersecurity challenges.
  • Exercises independent judgment in interpreting standards and resolving governance issues.
  • Balances risk, compliance, and operational practicality in decision-making.


The pay range for this role is$105,050to$161,800USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location, job-related knowledge, skills, and experience.
Benefits:
HP offers a comprehensive benefits package for this position, including:

  • Health insurance
  • Dental insurance
  • Vision insurance
  • Long term/short term disability insurance
  • Employee assistance program
  • Flexible spending account
  • Life insurance
  • Generous time off policies, including;
  • 4-12 weeks fully paid parental leave based on tenure
  • 11 paid holidays
  • Additional flexible paid vacation and sick leave (US benefits overview)


The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law.


Disclaimer
This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, knowledge, etc. These may be subject to change and additional functions may be assigned as needed by management.

Job -

Data & Information Technology

Schedule -

Full time

Shift -

No shift premium (United States of America)

Travel -

No

Relocation -

No

Equal Opportunity Employer (EEO) -

HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s).

Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.

For more information, review HP'sEEO Policy or read about your rights as an applicant under the law here: "Know Your Rights: Workplace Discrimination is Illegal"

What HP employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

HP logo

About HP

Sourced by ZipRecruiter

HP is a technology company that operates in more than 170 countries around the world united in creating technology that makes life better for everyone, everywhere. From the boardroom to factory floor, we create a culture where everyone is respected and where people can be themselves, while being a part of something bigger than themselves. We celebrate the notion that you can belong at HP and bring your authentic self to work each and every day. When you do that, you're more innovative and that helps grow our bottom line. Our history: HP's commitment to diversity, equity and inclusion - it's just who we are. From the boardroom to factory floor, we create a culture where everyone is respected and where people can be themselves, while being a part of something bigger than themselves. We celebrate the notion that you can belong at HP and bring your authentic self to work each and every day. When you do that, you're more innovative and that helps grow our bottom line.

Industry

It services

Company size

10,000+ Employees

Headquarters location

Palo Alto, CA, US

Year founded

1939

View All HP Jobs

Apply