Compensation Grade:
S22Salary Range:
$119,280.00-$172,955.00Opening Date:
August 7, 2026Closing Date:
August 22, 2026Please Note: All job announcements close at 11:59 p.m. of the day before the posted closing date.
Cybersecurity Compliance ManagerAs the Cybersecurity Compliance Manager, you will manage the organization's cybersecurity compliance program and ensure adherence to regulatory, legal, contractual, and internal policy requirements. You will develop and implement cybersecurity governance compliance strategies, oversees regulatory and compliance assessments. The manager establishes policies, standards, and processes that support the Airports Authority's cybersecurity program while promoting a culture of accountability, continuous improvement, and regulatory compliance across the organization.
Serves in the Information Security Department of the Office of Technology at the Headquarters Office Building.
KEY RESPONSIBILITIES
Develops, implements, and continuously improves the Authority's cybersecurity compliance and governance program in coordination with the enterprise compliance program.
Establishes cybersecurity compliance strategies, priorities, and annual work plans to support organizational objectives and evolving regulatory requirements.
Oversees cybersecurity compliance monitoring, testing, self-assessments, audits, and program reviews.
Leads cybersecurity regulatory, operational, and compliance risk assessments and recommends appropriate mitigation strategies.
Directs regulatory examinations, external audits, and third-party assessments, serving as the primary liaison with auditors and regulatory agencies.
Develops, maintains, and approves cybersecurity policies, standards, procedures, and compliance documentation.
Manages the third-party cybersecurity risk and compliance program, including vendor assessments and ongoing monitoring activities.
Monitors emerging cybersecurity laws, regulations, and industry standards and evaluates organizational impacts and implementation requirements.
Oversees cybersecurity certification and accreditation activities to ensure systems meet applicable security requirements.
Tracks compliance findings, corrective actions, remediation activities, key performance indicators (KPIs), and overall program effectiveness.
Prepares executive-level reports, dashboards, and presentations regarding cybersecurity risks, compliance posture, audit results, and strategic initiatives.
Collaborates with Legal, Human Resources, Procurement, Internal Audit, IT Operations, business units, and external partners to address cybersecurity compliance risks.
Provides leadership, supervision, coaching, performance management, and professional development for compliance analysts and other assigned staff.
Develops and delivers cybersecurity compliance awareness, education, and training programs.
Supports business continuity, disaster recovery, and incident response activities by ensuring compliance with applicable regulatory and security requirements.
Performs other duties as assigned
QUALIFICATIONS
Seven years of progressively responsible experience in cybersecurity compliance, audit, governance, risk management or information security.
Three years of leadership or supervisory experience.
Extensive knowledge of cybersecurity governance frameworks, including NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, CIS Controls, and applicable regulatory requirements.
Experience working with regulatory agencies and auditors.
Ability to analyze complex cybersecurity and regulatory issues and develop practical compliance solutions.
Knowledge of supervisory principles and ability to manage the operations and programs of the unit/team.
Ability to speak and write effectively, with emphasis on communicating and presenting complex technical information in reports and in presentations so others will understand.
PREFERRED QUALIFICATIONS
Certifications such as CRCM, CISA, CRISC, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM).
Master's degree in Cybersecurity, Information Technology, Business Administration, or related field.
EDUCATION
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
CERTIFICATIONS AND LICENSES REQUIRED
A state driver’s license in good standing.
NECESSARY SPECIAL FACTORS
Subject to recall on a 24-hour basis for essential technology services and emergencies such as cyber-attacks or Technology systems disaster recovery efforts.
WHAT WE OFFER
A career with the Airports Authority comes with more than just a paycheck; it offers a comprehensive benefits package designed to support you and your family’s health, financial security, and professional growth. Benefits include medical, dental, and vision coverage; well-being resources; health savings and flexible spending accounts; pension and retirement plans; and ongoing training and development opportunities. Discover more about our benefits package here.
A background security investigation will be required for all new hires.
Metropolitan Washington Airports Authority is an Equal Opportunity Employer.| Follow us on Twitter @MWAAcareers.
Skills Required
- Seven years of progressively responsible experience in cybersecurity compliance, audit, governance, risk management, or information security
- Three years of leadership or supervisory experience
- Extensive knowledge of cybersecurity governance frameworks including NIST CSF, NIST SP 800-53, ISO 27001, and CIS Controls
- Experience working with regulatory agencies and auditors
- Ability to analyze complex cybersecurity and regulatory issues and develop practical compliance solutions
- Knowledge of supervisory principles and ability to manage unit/team operations and programs
- Strong written and verbal communication skills for presenting technical information to executives and stakeholders
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field
- A state driver's license in good standing
- Subject to recall on a 24-hour basis for essential technology services and emergencies
- Background security investigation required for new hires
- Certifications such as CRCM, CISA, CRISC, CISSP, or CISM
- Master's degree in Cybersecurity, Information Technology, Business Administration, or related field
What We Do
The Metropolitan Washington Airports Authority is an independent authority that manages and operates the two major airports serving the U.S. national capital: Ronald Reagan Washington National Airport and Dulles International Airport.
