Cybersecurity Policy Analyst

Quantum Sky; Washington (District of Columbia); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

PTO

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is seeking a temporary Cybersecurity Policy Analyst to develop, analyze, and maintain federal cybersecurity policies, standards, and guidance to align programs with NIST, FISMA, and agency directives. You will translate complex requirements for technical and non-technical stakeholders, collaborate with governance, risk, and compliance teams, and prepare executive-level briefings and dashboards.

The role requires 4–7 years of policy experience and the ability to obtain a U.S.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, information assurance, public policy, or a related field; equivalent professional experience may be considered.
• 4–7 years of cybersecurity policy, governance, compliance, or policy experience.
• Ability to obtain and maintain a U.S. government security clearance if required by the contract.

Responsibilities

• Develop, review, update, and maintain policies, standards, procedures, guidelines, and governance documentation.
• Analyze federal cybersecurity laws, regulations, and directives to determine applicability and implementation requirements.
• Support alignment with NIST publications, FISMA, OMB guidance, and agency policies.
• Conduct policy and compliance gap assessments and document findings, risks, and remediation activities.
• Translate cybersecurity requirements into clear policy and procedural guidance for technical and non-technical stakeholders.
• Support governance frameworks, control implementation guidance, and policy repositories.
• Coordinate with system owners, security personnel, privacy officials, risk executives, and stakeholders to resolve issues.
• Support security assessments and authorization activities with policy analysis and documentation.
• Prepare executive briefings, status reports, dashboards, and recommendations on policy and compliance.
• Participate in working groups, audits, assessments, and governance forums.
• Maintain awareness of evolving federal cybersecurity priorities and update policies accordingly.

Skills

Cybersecurity policy

Policy writing

Regulatory compliance

Stakeholder communication

NIST RMF/CSF familiarity

Federal contracting experience

Education

Bachelor's degree

Job description

Description

Quantum Sky is searching for a temporary Cybersecurity Policy Analyst supports federal government cybersecurity programs by developing, analyzing, implementing, and maintaining cybersecurity policies, standards, procedures, and guidance. The position provides policy and compliance expertise to help ensure that information systems, programs, and organizational practices align with applicable federal cybersecurity requirements, risk management principles, and agency objectives. The Cybersecurity Policy Analyst works closely with cybersecurity, information technology, privacy, risk management, compliance, program management, and executive stakeholders to translate federal cybersecurity requirements into practical policies and operational procedures.

Responsibilities

• Develop, review, update, and maintain cybersecurity policies, standards, procedures, guidelines, and related governance documentation.
• Analyze federal cybersecurity laws, regulations, executive directives, standards, frameworks, and guidance to determine organizational applicability and implementation requirements.
• Support implementation and ongoing alignment with applicable federal cybersecurity requirements, including NIST publications, FISMA, OMB guidance, and agency-specific policies and directives.
• Conduct policy and compliance gap assessments and document findings, risks, recommendations, and remediation activities.
• Translate technical cybersecurity requirements into clear, actionable policy and procedural guidance for technical and non-technical stakeholders.
• Support the development and maintenance of cybersecurity governance frameworks, control implementation guidance, and policy repositories.
• Coordinate with system owners, security personnel, privacy officials, risk executives, and other stakeholders to resolve policy and compliance issues.
• Support security assessment and authorization activities by providing policy and compliance analysis and ensuring required documentation is complete and current.
• Prepare executive-level briefings, status reports, dashboards, and recommendations related to cybersecurity policy and compliance.
• Participate in working groups, stakeholder meetings, audits, assessments, and governance forums.
• Maintain awareness of evolving federal cybersecurity priorities and recommend updates to policies and procedures as appropriate.

Qualifications

Required:

• Bachelor's degree in cybersecurity, information technology, computer science, information assurance, public policy, or a related field; equivalent professional experience may be considered.
• 4–7 years of experience in cybersecurity, information security, IT governance, risk management, compliance, or cybersecurity policy.
• Experience interpreting and applying cybersecurity policies, standards, frameworks, and regulatory requirements.
• Experience developing professional or federal policy, governance, compliance, and technical documentation.
• Strong analytical, research, writing, and communication skills.
• Ability to communicate complex cybersecurity requirements to technical and non-technical audiences.
• Experience working with federal government agencies or federal contractors is strongly preferred.
• Ability to manage multiple priorities and work effectively with government and contractor stakeholders.
• Ability to obtain and maintain a U.S. government security clearance, if required by the contract.

Desired:

• Experience working with the NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), NIST SP 800-series publications, FISMA, FedRAMP, or related federal cybersecurity requirements.
• Familiarity with OMB cybersecurity policies and federal information security directives.
• Experience supporting cybersecurity governance, risk, and compliance (GRC) programs.
• Experience with security controls, control assessments, POA&Ms, system security plans (SSPs), and authorization documentation.
• Familiarity with privacy and cybersecurity requirements applicable to federal information systems.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, Security+, CAP, or equivalent credentials.
• Experience supporting audits, inspections, security assessments, or regulatory reviews.
• Experience preparing executive-level cybersecurity briefings and policy recommendations.

About Quantum Sky

The world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.

At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary for this role is $120,000-$130,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits:

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.

Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.