Cybersecurity Compliance Manager

Metropolitan Washington Airports Authority

1d•$119,280 - $172,955•Onsite

About The Position

As the Cybersecurity Compliance Manager, you will manage the organization's cybersecurity compliance program and ensure adherence to regulatory, legal, contractual, and internal policy requirements. You will develop and implement cybersecurity governance compliance strategies, oversees regulatory and compliance assessments. The manager establishes policies, standards, and processes that support the Airports Authority's cybersecurity program while promoting a culture of accountability, continuous improvement, and regulatory compliance across the organization. Serves in the Information Security Department of the Office of Technology at the Headquarters Office Building.

Requirements

Seven years of progressively responsible experience in cybersecurity compliance, audit, governance, risk management or information security.
Three years of leadership or supervisory experience.
Extensive knowledge of cybersecurity governance frameworks, including NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, CIS Controls, and applicable regulatory requirements.
Experience working with regulatory agencies and auditors.
Ability to analyze complex cybersecurity and regulatory issues and develop practical compliance solutions.
Knowledge of supervisory principles and ability to manage the operations and programs of the unit/team.
Ability to speak and write effectively, with emphasis on communicating and presenting complex technical information in reports and in presentations so others will understand.
A state driver’s license in good standing.
Subject to recall on a 24-hour basis for essential technology services and emergencies such as cyber-attacks or Technology systems disaster recovery efforts.

Nice To Haves

Certifications such as CRCM, CISA, CRISC, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM).
Master's degree in Cybersecurity, Information Technology, Business Administration, or related field.

Responsibilities

Develops, implements, and continuously improves the Authority's cybersecurity compliance and governance program in coordination with the enterprise compliance program.
Establishes cybersecurity compliance strategies, priorities, and annual work plans to support organizational objectives and evolving regulatory requirements.
Oversees cybersecurity compliance monitoring, testing, self-assessments, audits, and program reviews.
Leads cybersecurity regulatory, operational, and compliance risk assessments and recommends appropriate mitigation strategies.
Directs regulatory examinations, external audits, and third-party assessments, serving as the primary liaison with auditors and regulatory agencies.
Develops, maintains, and approves cybersecurity policies, standards, procedures, and compliance documentation.
Manages the third-party cybersecurity risk and compliance program, including vendor assessments and ongoing monitoring activities.
Monitors emerging cybersecurity laws, regulations, and industry standards and evaluates organizational impacts and implementation requirements.
Oversees cybersecurity certification and accreditation activities to ensure systems meet applicable security requirements.
Tracks compliance findings, corrective actions, remediation activities, key performance indicators (KPIs), and overall program effectiveness.
Prepares executive-level reports, dashboards, and presentations regarding cybersecurity risks, compliance posture, audit results, and strategic initiatives.
Collaborates with Legal, Human Resources, Procurement, Internal Audit, IT Operations, business units, and external partners to address cybersecurity compliance risks.
Provides leadership, supervision, coaching, performance management, and professional development for compliance analysts and other assigned staff.
Develops and delivers cybersecurity compliance awareness, education, and training programs.
Supports business continuity, disaster recovery, and incident response activities by ensuring compliance with applicable regulatory and security requirements.
Performs other duties as assigned