Policy Analyst

Intelligence and National Security Alliance; Springfield (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

MANTECH is seeking a motivated Policy Analyst for its Springfield, VA location to advise, lead, and manage policy development in alignment with PLCM processes. On-site role requiring TS/SCI clearance eligibility and strong cybersecurity policy expertise.

The role supports SME development, cross-functional collaboration, and compliance with executive orders and DoD directives while driving data-informed policy updates and governance improvements.

Qualifications

• 7+ years of experience leading, managing, and working policies within a Policy Life Cycle Management (PLCM) process.
• Bachelor’s Degree in Computer Science, Systems Engineering, Cybersecurity, International Affairs, Policy, or a related field. In lieu of a degree, 10+ years of experience is required.
• 2+ years of demonstrated experience tracking and managing formal taskers.
• 2+ years of demonstrated experience in coordinating and collaborating on agency-level support agreements.
• 2+ years of demonstrated experience reviewing and analyzing high-level governance documents (e.g., agency directives, statutes, Executive Orders).
• Demonstrated understanding of NIST 800-53 controls, cybersecurity frameworks, and high-level cybersecurity policy.
• Proven expertise in policy lifecycle management, including the orchestration of strategic agendas, the maintenance of policy compendiums, and the resolution of regulatory gaps and rescissions

Responsibilities

• Lead the development, review, and coordination of corporate, IT service, and cybersecurity/information assurance policies to ensure enterprise-wide alignment.
• Direct the creation of SME self-inspection checklists to facilitate rigorous monitoring, implementation tracking, and regulatory adherence.
• Lead specialized SME analysis to identify policy gaps, conducting deep-dive assessments to drive data-informed revisions and updates.
• Execute IV&V protocols to ensure all policy issuances are fact-based, accurate, and consistent with strategic planning and external mandates.
• Support the design and implementation of optimized policy workflows to enhance administrative efficiency and organizational agility.
• Manage the tracking and reporting of policy-related metrics and business analytics to measure the effectiveness of governance initiatives.
• Align internal policy frameworks with the organization’s overarching Cybersecurity Strategy to fortify information assurance.
• Analyze internal documentation and external issuances—including Executive Orders and IC/DoD policies—to proactively mitigate conflicts and address emerging impacts.

Skills

Policy lifecycle management

Governance documentation analysis

NIST 800-53 controls

Cybersecurity policy

Stakeholder coordination

Task tracking

Agency support agreements

Education

Bachelor's degree in Computer Science, Systems Engineering, Cybersecurity, International Affairs, Policy

Job description

MANTECH seeks a motivated, career and customer-oriented Policy Analyst to join our team in Springfield, VA. This role is 100% on-site.

The Policy Analyst advises, assists, leads, manages, and works all policy development, review, coordination, adjudication, promulgation, communication, and compliance in accordance with NGA’s Policy Life Cycle Management (PLCM) process. This role supports Subject Matter Expert (SME) development, coordination, and maintenance of all assigned policies, self-inspection checklists, and gap analyses.

Responsibilities include but are not limited to:

• Lead the development, review, and coordination of corporate, IT service, and cybersecurity/information assurance policies to ensure enterprise-wide alignment.
• Direct the creation of SME self-inspection checklists to facilitate rigorous monitoring, implementation tracking, and regulatory adherence.
• Lead specialized SME analysis to identify policy gaps, conducting deep-dive assessments to drive data-informed revisions and updates.
• Execute IV&V protocols to ensure all policy issuances are fact-based, accurate, and consistent with strategic planning and external mandates.
• Support the design and implementation of optimized policy workflows to enhance administrative efficiency and organizational agility.
• Manage the tracking and reporting of policy-related metrics and business analytics to measure the effectiveness of governance initiatives.
• Align internal policy frameworks with the organization’s overarching Cybersecurity Strategy to fortify information assurance.
• Analyze internal documentation and external issuances—including Executive Orders and IC/DoD policies—to proactively mitigate conflicts and address emerging impacts.

Minimum Qualifications:

• 7+ years of demonstrated experience leading, managing, and working policies in accordance with a Policy Life Cycle Management (PLCM) process
• Bachelor’s Degree in Computer Science, Systems Engineering, Cybersecurity, International Affairs, Policy, or a related field. In lieu of a degree, 10+ years of experience is required.
• 2+ years of demonstrated experience tracking and managing formal taskers.
• 2+ years of demonstrated experience in coordinating and collaborating on agency-level support agreements.
• 2+ years of demonstrated experience reviewing and analyzing high-level governance documents (e.g., agency directives, statutes, Executive Orders).
• Demonstrated understanding of NIST 800-53 controls, cybersecurity frameworks, and high-level cybersecurity policy.
• Proven expertise in policy lifecycle management, including the orchestration of strategic agendas, the maintenance of policy compendiums, and the resolution of regulatory gaps and rescissions

Clearance Requirements:

• Must have a current/active TS/SCI security clearance and be able to obtain a polygraph.

Physical Requirements:

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.