Compensation Grade:
S20Salary Range:
$94,665.00-$137,265.00Opening Date:
August 7, 2026Closing Date:
August 22, 2026Please Note: All job announcements close at 11:59 p.m. of the day before the posted closing date.
Cybersecurity Compliance AnalystAs a Cybersecurity Compliance Analyst, you will support the Airports Authority's cybersecurity compliance with applicable laws, regulations, contractual requirements, cybersecurity frameworks, and internal policies. You will conduct compliance assessments, supports audits, perform cybersecurity risk analyses, tracks remediation activities, and maintain documentation demonstrating compliance with established security requirements and recommending corrective actions to reduce regulatory and operational risk.
Works under the general supervision of the Cybersecurity Compliance Manager.
Serves in the Information Security Department of the Office of Technology at the Headquarters Office Building.
KEY RESPONSIBILITIES
Monitors compliance with applicable cybersecurity laws, regulations, contractual obligations, industry standards, and internal policies and procedures.
Conducts cybersecurity compliance assessments, audits, control reviews, and gap analyses against established security frameworks.
Researches new and emerging cybersecurity laws, regulations, standards, and best practices, and communicates potential organizational impacts and implementation requirements.
Tracks cybersecurity remediation activities and verifies timely implementation of corrective actions resulting from audits, assessments, vulnerability reviews, and regulatory findings.
Maintains cybersecurity compliance documentation, policies, standards, procedures, control inventories, risk registers, and audit records.
Assists with internal, and external cybersecurity audits by coordinating evidence collection, documentation, and audit responses.
Investigate potential compliance violations and recommend corrective measures.
Prepares cybersecurity compliance metrics, dashboards, and management reports.
Assists with the development, review, maintenance, and continuous improvement of cybersecurity policies, standards, procedures, and governance documentation.
Delivers cybersecurity compliance awareness training and provides guidance to business units regarding regulatory and policy requirements.
Performs other duties as assigned.
QUALIFICATIONS
Five years of progressively responsible experience in cybersecurity compliance, governance, risk management, information security, internal audit, or regulatory compliance. An equivalent combination of education and experience may be considered.
Knowledge of frameworks such as National Institute of Standards and Technology (NIST), Payment Card Industry Data Security Standard (PCI DSS), ISO 27001, CJIS, Health Insurance Portability and Accountability Act (HIPAA), Certified Information Systems Auditor (CISA), or similar.
Experience supporting cybersecurity compliance assessments, audits, risk assessments, or governance initiatives.
Knowledge of cybersecurity risk management principles, security controls, and regulatory compliance practices.
Experience preparing reports, maintaining compliance documentation, and tracking remediation activities.
Strong analytical, organizational, documentation, and problem-solving skills.
Ability to interpret technical and regulatory requirements and communicate findings effectively to both technical and nontechnical audiences.
PREFERRED QUALIFICATIONS
Professional certifications such as CRISC, CISM, CISSP, or CISA, or similar.
Experience supporting cybersecurity programs within government, aviation, transportation, or other highly regulated environments.
EDUCATION
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field.
CERTIFICATIONS AND LICENSES REQUIRED
A state driver’s license in good standing.
NECESSARY SPECIAL FACTORS
Subject to recall on a 24-hour basis for essential technology services and emergencies such as cyber-attacks or Technology systems disaster recovery efforts.
WHAT WE OFFER
A career with the Airports Authority comes with more than just a paycheck; it offers a comprehensive benefits package designed to support you and your family’s health, financial security, and professional growth. Benefits include medical, dental, and vision coverage; well-being resources; health savings and flexible spending accounts; pension and retirement plans; and ongoing training and development opportunities. Discover more about our benefits package here.
A background security investigation will be required for all new hires.
Metropolitan Washington Airports Authority is an Equal Opportunity Employer.| Follow us on Twitter @MWAAcareers.
Skills Required
- Five years of progressively responsible experience in cybersecurity compliance, governance, risk management, information security, internal audit, or regulatory compliance (or equivalent education/experience).
- Knowledge of frameworks and standards such as NIST, PCI DSS, ISO 27001, CJIS, HIPAA.
- Experience supporting cybersecurity compliance assessments, audits, risk assessments, or governance initiatives.
- Knowledge of cybersecurity risk management principles, security controls, and regulatory compliance practices.
- Experience preparing reports, maintaining compliance documentation, and tracking remediation activities.
- Strong analytical, organizational, documentation, and problem-solving skills.
- Ability to interpret technical and regulatory requirements and communicate findings to technical and nontechnical audiences.
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or related field (or equivalent).
- A state driver's license in good standing.
- Background security investigation required for all new hires.
- Professional certifications such as CRISC, CISM, CISSP, or CISA.
- Experience supporting cybersecurity programs within government, aviation, transportation, or other highly regulated environments.
What We Do
The Metropolitan Washington Airports Authority is an independent authority that manages and operates the two major airports serving the U.S. national capital: Ronald Reagan Washington National Airport and Dulles International Airport.
