Cybersecurity Compliance Analyst (2 Positions Available)

Metropolitan Washington Airports Authority

5d•$94,665 - $137,265•Onsite

About The Position

As a Cybersecurity Compliance Analyst, you will support the Airports Authority's cybersecurity compliance with applicable laws, regulations, contractual requirements, cybersecurity frameworks, and internal policies. You will conduct compliance assessments, supports audits, perform cybersecurity risk analyses, tracks remediation activities, and maintain documentation demonstrating compliance with established security requirements and recommending corrective actions to reduce regulatory and operational risk.

Requirements

Five years of progressively responsible experience in cybersecurity compliance, governance, risk management, information security, internal audit, or regulatory compliance. An equivalent combination of education and experience may be considered.
Knowledge of frameworks such as National Institute of Standards and Technology (NIST), Payment Card Industry Data Security Standard (PCI DSS), ISO 27001, CJIS, Health Insurance Portability and Accountability Act (HIPAA), Certified Information Systems Auditor (CISA), or similar.
Experience supporting cybersecurity compliance assessments, audits, risk assessments, or governance initiatives.
Knowledge of cybersecurity risk management principles, security controls, and regulatory compliance practices.
Experience preparing reports, maintaining compliance documentation, and tracking remediation activities.
Strong analytical, organizational, documentation, and problem-solving skills.
Ability to interpret technical and regulatory requirements and communicate findings effectively to both technical and nontechnical audiences.
A state driver’s license in good standing.

Nice To Haves

Professional certifications such as CRISC, CISM, CISSP, or CISA, or similar.
Experience supporting cybersecurity programs within government, aviation, transportation, or other highly regulated environments.

Responsibilities

Monitors compliance with applicable cybersecurity laws, regulations, contractual obligations, industry standards, and internal policies and procedures.
Conducts cybersecurity compliance assessments, audits, control reviews, and gap analyses against established security frameworks.
Researches new and emerging cybersecurity laws, regulations, standards, and best practices, and communicates potential organizational impacts and implementation requirements.
Tracks cybersecurity remediation activities and verifies timely implementation of corrective actions resulting from audits, assessments, vulnerability reviews, and regulatory findings.
Maintains cybersecurity compliance documentation, policies, standards, procedures, control inventories, risk registers, and audit records.
Assists with internal, and external cybersecurity audits by coordinating evidence collection, documentation, and audit responses.
Investigate potential compliance violations and recommend corrective measures.
Prepares cybersecurity compliance metrics, dashboards, and management reports.
Assists with the development, review, maintenance, and continuous improvement of cybersecurity policies, standards, procedures, and governance documentation.
Delivers cybersecurity compliance awareness training and provides guidance to business units regarding regulatory and policy requirements.
Performs other duties as assigned.