Cybersecurity Compliance & Risk Analyst

Metropolitan Washington Airports Authority; Virginia; On-site; USD 95,000 - 137,000; Full time

Benefits offered by this job

Health benefits

Dental and vision coverage

Pension plan

Job summary

Metropolitan Washington Airports Authority is seeking a Cybersecurity Compliance Analyst to support compliance with laws, regulations, and standards. The role conducts assessments, audits, risk analyses, and tracks remediation while maintaining documentation to reduce regulatory and operational risk.

Under supervision of the Cybersecurity Compliance Manager, you will contribute to policy development, governance, and awareness training across the organization.

Qualifications

• 5 years of progressively responsible experience in cybersecurity compliance, governance, risk management, information security, internal audit, or regulatory compliance.
• Knowledge of frameworks such as NIST, PCI DSS, ISO 27001, CJIS, HIPAA, CISA, or related standards.
• Experience supporting cybersecurity compliance assessments, audits, risk assessments, or governance initiatives.
• Experience preparing reports, maintaining compliance documentation, and tracking remediation activities.
• Strong analytical, organizational, documentation, and problem-solving skills.
• Ability to interpret technical and regulatory requirements and communicate findings to both technical and nontechnical audiences.

Responsibilities

• Monitors compliance with applicable cybersecurity laws, regulations, contractual obligations, industry standards, and internal policies.
• Conducts cybersecurity compliance assessments, audits, control reviews, and gap analyses against established frameworks.
• Researches new cybersecurity laws, regulations, standards, and practices and communicates impacts.
• Tracks remediation activities and verifies timely implementation of corrective actions.
• Maintains cybersecurity compliance documentation, policies, standards, procedures, control inventories, risk registers, and audit records.
• Assists with internal and external cybersecurity audits by coordinating evidence collection and responses.
• Prepares cybersecurity compliance metrics, dashboards, and management reports.
• Delivers cybersecurity compliance awareness training and guides business units on regulatory requirements.

Skills

Analytical thinking

Organizational skills

Documentation

Problem solving

Communication skills

Regulatory interpretation

Education

Bachelor's degree in Cybersecurity / Information Systems / Computer Science / Information Technology

Job description

Metropolitan Washington Airports Authority is seeking a Cybersecurity Compliance Analyst to support compliance with laws, regulations, and standards. The role conducts assessments, audits, risk analyses, and tracks remediation while maintaining documentation to reduce regulatory and operational risk.

Under supervision of the Cybersecurity Compliance Manager, you will contribute to policy development, governance, and awareness training across the organization.