ZipRecruiter

Log In

1

Cyber Security Policy Jobs in Virginia (NOW HIRING)

Pae

Cybersecurity Analyst

Mclean, VA · On-site

It supports the implementation of RMF by developing documentation and updating policies, procedures, and processes as assigned. The Cybersecurity Analyst will assess and mitigates system security ...

Amentum

Cybersecurity Analyst

Mclean, VA · On-site

It supports the implementation of RMF by developing documentation and updating policies, procedures, and processes as assigned. The Cybersecurity Analyst will assess and mitigates system security ...

Tulk LLC

Policy Analyst Mid

Fort Belvoir, VA · On-site

Support the organization's Cybersecurity Strategy. * Analyze internal documents and external issuances (e.g., IC/DoW policy, Executive Orders) to identify policy impacts, conflicts, or gaps. Required ...

Everwatch

Policy Analyst, Mid

Springfield, VA · On-site

$62.50 - $72.12/hr

Support policy development, review, coordination, and compliance for corporate policies, IT services policies, cybersecurity, and information assurance policies. * Support the development of SME self ...

next page

Showing results 1-20

All JobsCyber Security Policy JobsCyber Security Policy Jobs in Virginia

Cyber Security Policy information

See Virginia salary details

$56.5K

$131.8K

$184.4K

How much do cyber security policy jobs pay per year?

As of Aug 28, 2026, the average yearly pay for cyber security policy in Virginia is $131,822.00, according to ZipRecruiter salary data. Most workers in this role earn between $110,000.00 and $148,700.00 per year, depending on experience, location, and employer.

What is cyber security policy?

A cyber security policy is a set of guidelines, rules, and procedures that organizations create to protect their digital assets and sensitive information from cyber threats. The policy outlines acceptable use of technology, roles and responsibilities, and protocols for responding to security incidents. It helps ensure that everyone in the organization understands how to safeguard data, comply with regulations, and reduce the risk of cyberattacks. A strong cyber security policy is essential for maintaining business continuity, legal compliance, and customer trust.

What are the key skills and qualifications needed to thrive in cyber security policy?

To thrive in Cyber Security Policy, you need a solid understanding of information security principles, risk assessment, compliance frameworks, and typically a degree in cybersecurity, information technology, or a related field. Familiarity with standards such as NIST, ISO 27001, and government regulations, along with certifications like CISSP or CISM, is highly valued. Strong analytical thinking, communication, and collaboration skills help you interpret technical information and craft effective policies. These competencies ensure organizations can mitigate cyber risks, comply with regulations, and maintain robust security postures.

What are some common challenges faced by professionals working in cyber security policy roles?

Professionals in Cyber Security Policy often navigate the challenge of balancing organizational security needs with regulatory compliance and user privacy requirements. They must stay updated on rapidly evolving cyber threats and policy frameworks while ensuring that policies are practical for technical teams to implement. Additionally, they frequently collaborate with legal, IT, and executive departments, requiring strong communication and negotiation skills to align diverse stakeholder interests. Adapting policies to different business units and staying proactive against emerging risks are also key aspects of the role.

What is the difference between Cyber Security Policy vs Cyber Security Analyst?

AspectCyber Security PolicyCyber Security Analyst
Primary FocusDeveloping, implementing, and maintaining security policies and proceduresMonitoring, analyzing, and responding to security threats and incidents
Required CredentialsKnowledge of security frameworks, policies, and compliance standardsCertifications like CISSP, CEH, or Security+; technical skills
Work EnvironmentPolicy development teams, compliance departments, managementSecurity operations centers, IT teams, incident response teams
Industry UsageUsed across organizations to establish security standardsUsed to identify and mitigate security threats

While a Cyber Security Policy focuses on creating and maintaining security guidelines, a Cyber Security Analyst actively monitors and responds to security threats. Both roles are essential for a comprehensive security strategy, with policies providing the framework and analysts ensuring its enforcement and effectiveness.

How to get into cybersecurity policy?

To enter cybersecurity policy, develop a strong understanding of cybersecurity principles, laws, and regulations, often through a degree in cybersecurity, computer science, or law. Gaining experience with policy development, risk management, and familiarity with tools like compliance frameworks (e.g., NIST, ISO) can be beneficial, along with certifications such as CISSP or CISA. Building connections through industry events and staying informed on current cybersecurity issues also support entry into this field.

What are popular job titles related to Cyber Security Policy jobs in Virginia?

For Cyber Security Policy jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Cyber Security Policy jobs in Virginia look for?

The top searched job categories for Cyber Security Policy jobs in Virginia are:

Cyber Security Policy jobs near you
Infographic showing various Cyber Security Policy job openings in Virginia as of August 2026, with employment types broken down into 1% As Needed, 75% Full Time, 23% Part Time, and 1% Contract. Highlights an 93% Physical, 3% Hybrid, and 4% Remote job distribution, with an average salary of $131,822 per year, or $63.4 per hour.

Cyber Security Policy Analyst

Springfield, VA • On-site

Marathon TS
IT Services • 51 - 200 employees
Learn more about Marathon TSexternal

Full-time

Re-posted 13 days ago

Job description

Job Summary:
Marathon TS is seeking a Cyber Security Policy Analyst to advise, assist, lead all CIO-TES Cybersecurity Policy development, review, coordination, adjudication, promulgation, communication, and compliance. This role involves supporting SME development and maintaining all assigned NGA-wide Policy while ensuring compliance with the Policy Life Cycle Management.
Responsibilities:
• Lead, manage, work and/or support Policy development, review, coordination, adjudication, promulgation, communication, and compliance in accordance with CIO-T's PLCM for assigned NGA-wide Corporate Policies, IT Services Policies for daily IT Operations, CIO Enterprise Policies, Cyber Security, Information Assurance, Section 508, etc. Policies.
• Lead, manage, oversee, and support SME development of SME Self-Inspection Compliance Checklists to ensure policy implementation, monitoring and tracking of compliance.
• Lead, manage, oversee, and support SME analysis and compliance determinations for Gap Analysis, and Policy revisions/updates as/if required.
• Conduct independent verification and validation to ensure NGA CIO-TES are clear, fact-based, accurate, outcome-driven, consistent with external guidance, and reflective of NGA strategic planning.
• Advise and assist the NGA SPP for CIO-TES in fulfilling his role and responsibilities in accordance with the NGA Corporate Policy Program.
• Support implementation of Policy Business Process Improvements.
• Support tracking and reporting of Policy Business Analytics.
• Support tracking and reporting of metrics and Policy Performance Measures.
Qualifications:
Required:
• Demonstrated experience leading, managing and working DoD Policies in accordance with Policy Life Cycle Management (PLCM) process and procedures, and self-inspection checklist.
• Demonstrated experience as Policy Officers for their assigned policy functional areas.
• Bachelor's Degree and 11-14 years equivalent experience or experience within computer science, system engineering or other cyber security related field.
Company:
Marathon TS provides a full range of consulting & manpower services for clients that needs support from skilled and experienced individuals. Founded in 2009, the company is headquartered in Sterling, USA, with a team of 51-200 employees. The company is currently Growth Stage.
Marathon TS logo

About Marathon TS

Sourced by ZipRecruiter

Marathon TS provides a full range of professional services for clients that require support from professionals with specialized skills and experience in a specific technical area or subject matter. Marathon TS also provides IT solutions, including strategy, operations, transformation and mission support.

Industry

It services

Company size

51 - 200 Employees

Headquarters location

Sterling, VA, US

Year founded

2009

Social media

FacebookTwitter

View All Marathon TS Jobs

Apply