Policy Analyst

ECS; Springfield (AL); On-site; USD 96,000 - 118,000; Full time

Job summary

Everforth ECS seeks a Policy Analyst – Mid to support a dynamic policy program at its Springfield, VA client site. The role spans strategic, technical, and administrative policy work with emphasis on PLCM and cybersecurity policy management.

Responsibilities include leading policy development, coordinating reviews, and ensuring compliance with government guidance and IT/security standards. Requires TS/SCI and Bachelor’s degree plus 7+ years of policy experience.

Qualifications

• US Citizenship
• Active TS/SCI with willingness and ability to pass CI Poly
• Bachelor's Degree in CS, Systems Eng, Cybersecurity, International Affairs, Policy, or related field
• 7+ years leading, managing, and working policies in PLCM processes
• Strong problem solving, decision making, and stakeholder communication skills
• Knowledge of NIST 800-53 controls, cybersecurity frameworks, and governance documents

Responsibilities

• Lead, manage, or support policy development, review, coordination, and compliance for corporate and IT policies.
• Lead SME self-inspection checklists to ensure policy implementation and monitoring.
• Lead SME analysis for gap analyses and policy revisions.
• Conduct independent verification and validation to ensure policies are clear and compliant with guidance.
• Identify policy gaps and propose solutions to policy leads.
• Support policy business process improvements and analytics reporting.
• Support the organization’s Cybersecurity Strategy.
• Analyze internal documents and external issuances to identify impacts and gaps.
• Other duties as assigned.

Skills

Policy analysis

Policy Life Cycle

Stakeholder communication

NIST 800-53 knowledge

Governance understanding

Education

Bachelor's degree in Computer Science, Systems Engineering, Cybersecurity, International Affairs, Policy, or related field

Job description

Everforth ECS is seeking a Policy Analyst - MID, to work at our Springfield, VA customer site.

Note: This position is contingent upon contract award and final acceptance by government customer.

The Policy Analyst role is broad and multifaceted, spanning strategic, technical, and administrative domains. The core of these positions involves researching, analyzing, and evaluating the impact of changing mission needs and organizational practices to develop, update, and recommend policies.

The role's breadth is demonstrated through various specializations, including high-level strategic planning and business analysis for executive management; detailed IT and cybersecurity policy management, including compliance with standards such as NIST SP 800-53; and managing the public and foreign partner release of intelligence, which requires deep knowledge of disclosure and redaction policies. This role can also involve developing and managing interagency agreements, supporting personnel in overseas environments, and effectively communicating and tracking all policies for compliance. The Policy Analyst – Mid-Level advises, assists, leads, manages, and works on all policy development, review, coordination, adjudication, promulgation, communication, and compliance in accordance with NGA’s Policy Life Cycle Management (PLCM) process. This role supports Subject Matter Expert (SME) development, coordination, and maintenance of all assigned policies, self-inspection checklists, and gap analyses.

Duties May Include:

• Lead, manage, and/or support policy development, review, coordination, and compliance for corporate policies, IT services policies, and cybersecurity/information assurance policies.
• Lead and support the development of SME self-inspection compliance checklists to ensure policy implementation, monitoring, and tracking.
• Lead and support SME analysis for gap analysis and policy revisions.
• Conduct independent verification and validation to ensure policies are clear, fact-based, accurate, and consistent with external guidance and strategic planning.
• Identify policy gaps and propose appropriate solutions and resolutions to the policy lead.
• Support the implementation of policy business process improvements.
• Support the tracking and reporting of policy business analytics, metrics, and performance measures.
• Support the organization’s Cybersecurity Strategy.
• Analyze internal documents and external issuances (e.g., IC/DoW policy, Executive Orders) to identify policy impacts, conflicts, or gaps.
• Other duties, as assigned.

Salary Range: $96,000-118,000

General Description of Benefits

Qualifications

• US Citizenship
• Active TS/SCI with willingness and ability to pass CI Poly
• A minimum of a Bachelor’s Degree in Computer Science, Systems Engineering, Cybersecurity, International Affairs, Policy, or a related field
• A minimum of 7+ years of demonstrated experience leading, managing, and working policies in accordance with a Policy Life Cycle Management (PLCM) process
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management)
• Demonstrated understanding of NIST 800-53 controls, cybersecurity frameworks, and high-level cybersecurity policy.
• At least 24 months of demonstrated experience reviewing and analyzing high-level governance documents (e.g., agency directives, statutes, Executive Orders)
• Demonstrated experience with extensive knowledge of, and in-depth experience, skill, and expertise in leading, managing, and working policy compendiums, frameworks, strategic planning agendas, rescissions, and gaps
• At least 24 months of demonstrated experience tracking and managing formal taskers
• At least 24 months of demonstrated experience in coordinating and collaborating on agency-level support agreements

Desired Skills

• Demonstrated experience creating and exercising Policy Life Cycle Management (PLCM) process and procedures, and self-inspection checklists

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.
Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.
We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!