Cybersecurity Compliance & Risk Analyst

Metropolitan Washington Airports Authority; Arlington (VA); On-site; USD 95,000 - 137,000; Full time

Job summary

Metropolitan Washington Airports Authority is seeking a Cybersecurity Compliance Analyst to support our cybersecurity program. You will perform compliance assessments, advise on controls, and help ensure regulatory alignment across our operations at MWAA.

The role requires experience with NIST, PCI DSS, ISO 27001, and related frameworks, plus ability to document findings, track remediation, and communicate with both technical teams and leadership.

Qualifications

• Five years of progressively responsible experience in cybersecurity compliance or related field.
• Experience with frameworks such as NIST, PCI DSS, ISO 27001, CJIS, HIPAA, or CISA.
• Ability to prepare reports and track remediation activities with strong analytical skills.

Responsibilities

• Monitors compliance with cybersecurity laws, regulations, contractual obligations, industry standards, and internal policies.
• Conducts cybersecurity compliance assessments, audits, control reviews, and gap analyses against established security frameworks.
• Researches new and emerging cybersecurity laws, regulations, standards, and best practices, and communicates potential organizational impacts.
• Tracks cybersecurity remediation activities and verifies timely implementation of corrective actions.
• Maintains cybersecurity compliance documentation, policies, standards, procedures, control inventories, risk registers, and audit records.
• Assists with internal and external cybersecurity audits by coordinating evidence collection, documentation, and audit responses.
• Investigates potential compliance violations and recommends corrective measures.
• Prepares cybersecurity compliance metrics, dashboards, and management reports.
• Assists with development and maintenance of cybersecurity policies and governance documentation.
• Delivers cybersecurity compliance awareness training and guidance to business units.

Skills

Cybersecurity compliance

Governance & risk management

Information security

Regulatory compliance

Analytical skills

Education

Bachelor's degree in Cybersecurity or related field

Job description

Metropolitan Washington Airports Authority is seeking a Cybersecurity Compliance Analyst to support our cybersecurity program. You will perform compliance assessments, advise on controls, and help ensure regulatory alignment across our operations at MWAA.

The role requires experience with NIST, PCI DSS, ISO 27001, and related frameworks, plus ability to document findings, track remediation, and communicate with both technical teams and leadership.