Cybersecurity Technical Writer

Cybersecurity Technical Writer

Location: Jersey City, Dallas or Tampa (Hybrid 3 days/week)

Job Description:

This role is for a cybersecurity documentation professional who will own the governance documentation for Cyber Security Operations: policies, standards, procedures and job aids. Cyber Security Operations includes Cyber Monitoring and Incident Response, Offensive Cyber Operations, Insider Risk, Threat Hunt, Modernization, Operations Readiness and Cyber Program Enablement. The Cybersecurity Technical Writer will turn operational practices, regulatory requirements and leadership direction into clear, controlled and auditable documents. These documents should let teams work consistently and show compliance to auditors and regulators. The person in this role will work closely with team leads, subject matter experts, and Compliance so that all documentation stays accurate, current and aligned with DTCC Information Security Policies.

The ideal candidate will have:

• 7+ years of professional experience writing policies, standards, procedures or technical documentation, with at least 3 years in cybersecurity, IT risk or a regulated financial services environment.
• Proven experience setting up and running a document governance program, including templates, document hierarchy, review cycles, version control and approval workflows.

Position Requirements

• Write, update and maintain Cyber Security Operations policies and standards, and align them with DTCC enterprise policy and the applicable regulatory and industry frameworks.
• Write step-by-step procedures, SOPs, runbooks and playbooks for operational activities. Examples include rules of engagement, testing workflows, escalation paths and handoffs between teams.
• Design job aids that support consistent execution and onboarding, such as quick-reference guides, checklists, decision trees, process flows and how-to guides.
• Set up and enforce a documentation hierarchy so policies, standards, procedures and job aids are clearly separated and traceable to each other.
• Own document lifecycle governance: templates, naming conventions, document ownership, version control, scheduled reviews (at least annually), approvals, exceptions and retirement.
• Interview subject matter experts and observe workflows to document how work is actually done, then find gaps, inconsistencies and outdated practices.
• Map documentation to control requirements. Support internal audit, regulatory examination and evidence requests with complete, traceable materials.
• Run gap analyses when policies, regulations, tools or organizational structures change, and update affected documents promptly.
• Manage the documentation within the firm's document repository.
• Create and maintain a Cyber Security Operations style guide and glossary so terminology and formatting stay consistent.
• Help with training and communications when new or changed documents are rolled out.
• Use approved AI tools responsibly to speed up drafting and review, while keeping human validation, accuracy and confidentiality in place.

Work Description

• Maintain the Cyber Security Operations documentation library and its review schedule.
• Coordinate drafting, SME review, stakeholder feedback and formal approval for each document.
• Track document status, review dates and outstanding updates.
• Report documentation health and compliance metrics to leadership.
• Document all work according to DTCC Information Security Policies, records management requirements and Cyber Security Operations governance standards.

Skills Description

• Exceptional writing, editing and information-design skills, with the ability to produce clear, concise and unambiguous directive language.
• A clear understanding of how a policy, a standard, a procedure, a guideline and a job aid differ, and when to use each one.
• Working knowledge of cybersecurity operations concepts, including penetration testing, red teaming, threat hunting, insider risk, incident response and vulnerability management.
• Familiarity with NIST SP 800-53, the NIST CSF, MITRE ATT&CK, ISO 27001 and financial services regulatory expectations such as FFIEC and SEC requirements.
• Experience with process mapping and visual documentation using tools such as Visio, Lucidchart or similar.
• Advanced skill in Microsoft Office (Word, Excel, PowerPoint, Outlook) and SharePoint, including lists, metadata and version control.
• Strong attention to detail, careful handling of sensitive information, and the ability to manage several documents at once.
• Ability to influence and work with technical subject matter experts at all levels.

Qualifications

• Bachelor's degree in English, Communications, Technical Writing, Information Security or a related field, or the equivalent combination of education, training and work experience.
• 7+ years of experience developing policies, standards, procedures or technical documentation.
• 3+ years supporting cybersecurity, IT security, IT risk or compliance functions.
• Preferred certifications include CompTIA Security+, CISSP, CISA, CRISC, or a technical communication credential such as CPTC