Cybersecurity Compliance Analyst (2 Positions Available)

Metropolitan Washington Airports Authority; Virginia; On-site; USD 95,000 - 137,000; Full time

Benefits offered by this job

Health benefits

Dental and vision coverage

Pension plan

Job summary

Metropolitan Washington Airports Authority is seeking a Cybersecurity Compliance Analyst to support compliance with laws, regulations, and standards. The role conducts assessments, audits, risk analyses, and tracks remediation while maintaining documentation to reduce regulatory and operational risk.

Under supervision of the Cybersecurity Compliance Manager, you will contribute to policy development, governance, and awareness training across the organization.

Qualifications

• 5 years of progressively responsible experience in cybersecurity compliance, governance, risk management, information security, internal audit, or regulatory compliance.
• Knowledge of frameworks such as NIST, PCI DSS, ISO 27001, CJIS, HIPAA, CISA, or related standards.
• Experience supporting cybersecurity compliance assessments, audits, risk assessments, or governance initiatives.
• Experience preparing reports, maintaining compliance documentation, and tracking remediation activities.
• Strong analytical, organizational, documentation, and problem-solving skills.
• Ability to interpret technical and regulatory requirements and communicate findings to both technical and nontechnical audiences.

Responsibilities

• Monitors compliance with applicable cybersecurity laws, regulations, contractual obligations, industry standards, and internal policies.
• Conducts cybersecurity compliance assessments, audits, control reviews, and gap analyses against established frameworks.
• Researches new cybersecurity laws, regulations, standards, and practices and communicates impacts.
• Tracks remediation activities and verifies timely implementation of corrective actions.
• Maintains cybersecurity compliance documentation, policies, standards, procedures, control inventories, risk registers, and audit records.
• Assists with internal and external cybersecurity audits by coordinating evidence collection and responses.
• Prepares cybersecurity compliance metrics, dashboards, and management reports.
• Delivers cybersecurity compliance awareness training and guides business units on regulatory requirements.

Skills

Analytical thinking

Organizational skills

Documentation

Problem solving

Communication skills

Regulatory interpretation

Education

Bachelor's degree in Cybersecurity / Information Systems / Computer Science / Information Technology

Job description

Compensation Grade:S20Salary Range:$94,665.00-$137,265.00Opening Date:August 7, 2026Closing Date:August 22, 2026Please Note: All job announcements close at 11:59 p.m. of the day before the posted closing date.Cybersecurity Compliance AnalystAs a Cybersecurity Compliance Analyst, you will support the Airports Authority's cybersecurity compliance with applicable laws, regulations, contractual requirements, cybersecurity frameworks, and internal policies. You will conduct compliance assessments, supports audits, perform cybersecurity risk analyses, tracks remediation activities, and maintain documentation demonstrating compliance with established security requirements and recommending corrective actions to reduce regulatory and operational risk.Works under the general supervision of the Cybersecurity Compliance Manager.Serves in the Information Security Department of the Office of Technology at the Headquarters Office Building.KEY RESPONSIBILITIESMonitors compliance with applicable cybersecurity laws, regulations, contractual obligations, industry standards, and internal policies and procedures.Conducts cybersecurity compliance assessments, audits, control reviews, and gap analyses against established security frameworks.Researches new and emerging cybersecurity laws, regulations, standards, and best practices, and communicates potential organizational impacts and implementation requirements.Tracks cybersecurity remediation activities and verifies timely implementation of corrective actions resulting from audits, assessments, vulnerability reviews, and regulatory findings.Maintains cybersecurity compliance documentation, policies, standards, procedures, control inventories, risk registers, and audit records.Assists with internal, and external cybersecurity audits by coordinating evidence collection, documentation, and audit responses.Investigate potential compliance violations and recommend corrective measures.Prepares cybersecurity compliance metrics, dashboards, and management reports.Assists with the development, review, maintenance, and continuous improvement of cybersecurity policies, standards, procedures, and governance documentation.Delivers cybersecurity compliance awareness training and provides guidance to business units regarding regulatory and policy requirements.Performs other duties as assigned.QUALIFICATIONSFive years of progressively responsible experience in cybersecurity compliance, governance, risk management, information security, internal audit, or regulatory compliance. An equivalent combination of education and experience may be considered.Knowledge of frameworks such as National Institute of Standards and Technology (NIST), Payment Card Industry Data Security Standard (PCI DSS), ISO 27001, CJIS, Health Insurance Portability and Accountability Act (HIPAA), Certified Information Systems Auditor (CISA), or similar.Experience supporting cybersecurity compliance assessments, audits, risk assessments, or governance initiatives.Knowledge of cybersecurity risk management principles, security controls, and regulatory compliance practices.Experience preparing reports, maintaining compliance documentation, and tracking remediation activities.Strong analytical, organizational, documentation, and problem-solving skills.Ability to interpret technical and regulatory requirements and communicate findings effectively to both technical and nontechnical audiences.PREFERRED QUALIFICATIONSProfessional certifications such as CRISC, CISM, CISSP, or CISA, or similar.Experience supporting cybersecurity programs within government, aviation, transportation, or other highly regulated environments.EDUCATIONBachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field.CERTIFICATIONS AND LICENSES REQUIREDA state driver’s license in good standing.NECESSARY SPECIAL FACTORSSubject to recall on a 24-hour basis for essential technology services and emergencies such as cyber-attacks or Technology systems disaster recovery efforts.WHAT WE OFFERA career with the Airports Authority comes with more than just a paycheck; it offers a comprehensive benefits package designed to support you and your family’s health, financial security, and professional growth. Benefits include medical, dental, and vision coverage; well-being resources; health savings and flexible spending accounts; pension and retirement plans; and ongoing training and development opportunities. Discover more about our benefits package here.A background security investigation will be required for all new hires.Metropolitan Washington Airports Authority is an Equal Opportunity Employer.| Follow us on Twitter @MWAAcareers.