ZipRecruiter

Log In

1

Cybersecurity Policy Analyst Jobs (NOW HIRING)

ManTech International

Policy Analyst

Saint Louis, MO · On-site

The Policy Analyst advises, assists, leads, manages, and works all policy development, review ... Lead the development, review, and coordination of corporate, IT service, and cybersecurity ...

ManTech International

Policy Analyst

Springfield, VA · On-site

The Policy Analyst advises, assists, leads, manages, and works all policy development, review ... Lead the development, review, and coordination of corporate, IT service, and cybersecurity ...

ManTech

Policy Analyst

Springfield, VA

The Policy Analyst advises, assists, leads, manages, and works all policy development, review ... Lead the development, review, and coordination of corporate, IT service, and cybersecurity ...

Tulk LLC

Policy Analyst Mid

Saint Louis, MO · On-site

$124K - $148K/yr

Support the organization's Cybersecurity Strategy. * Analyze internal documents and external issuances (e.g., IC/DoW policy, Executive Orders) to identify policy impacts, conflicts, or gaps. Required ...

Tulk LLC

Policy Analyst Mid

Fort Belvoir, VA · On-site

$124K - $148K/yr

Support the organization's Cybersecurity Strategy. * Analyze internal documents and external issuances (e.g., IC/DoW policy, Executive Orders) to identify policy impacts, conflicts, or gaps. Required ...

Everwatch

Policy Analyst, Mid

Springfield, VA · On-site

$62.50 - $72.12/hr

Support the organization's Cybersecurity Strategy. * Analyze internal documents and external issuances, such as IC and DoW policy and Executive Orders, to identify policy impacts, conflicts, or gaps.

SAIC

Policy Analyst

Saint Louis, MO · On-site

Support the organization's Cybersecurity Strategy. * Analyze internal documents and external issuances (e.g., IC/DoW policy, Executive Orders) to identify policy impacts, conflicts, or gaps.

next page

Showing results 1-20

All JobsCybersecurity Policy Analyst Jobs

Cybersecurity Policy Analyst information

See salary details

$43K

$99.4K

$150K

How much do cybersecurity policy analyst jobs pay per year?

As of Jun 30, 2026, the average yearly pay for cybersecurity policy analyst in the United States is $99,400.00, according to ZipRecruiter salary data. Most workers in this role earn between $79,500.00 and $115,500.00 per year, depending on experience, location, and employer.

What does a cybersecurity policy analyst do?

A cybersecurity policy analyst develops, reviews, and implements security policies and procedures to protect an organization’s information systems. They analyze security risks, ensure compliance with regulations, and recommend improvements, often using tools like risk assessment frameworks and security standards. Strong communication skills and knowledge of cybersecurity best practices are essential for this role.

What are Cybersecurity Policy Analysts?

Cybersecurity Policy Analysts are professionals who develop, implement, and evaluate policies and regulations to protect an organization’s digital assets and information systems. They analyze current security measures, assess risks, and ensure compliance with laws and industry standards. Their work helps organizations respond to evolving cyber threats and maintain robust security protocols. Cybersecurity Policy Analysts often collaborate with IT teams, legal advisors, and management to create effective security policies and incident response plans.

What is the difference between Cybersecurity Policy Analyst vs Cybersecurity Analyst?

AspectCybersecurity Policy AnalystCybersecurity Analyst
Required CredentialsBachelor's in cybersecurity, IT, or related field; certifications like CISSP, CISABachelor's in cybersecurity, IT, or related field; certifications like CompTIA Security+ or CISSP
Work EnvironmentPolicy development, compliance, and strategic planning in office settingsTechnical security monitoring, incident response, and system analysis
Employer & Industry UsageGovernment agencies, corporations, consulting firms focusing on security policiesIT departments, security firms, and organizations managing technical security

The main difference is that a Cybersecurity Policy Analyst focuses on creating and managing security policies and ensuring compliance, while a Cybersecurity Analyst handles technical security measures and threat mitigation. Both roles require similar credentials but serve different functions within cybersecurity teams.

Can I make $200,000 a year in cyber security?

Cybersecurity Policy Analysts with extensive experience, advanced certifications, and specialized skills can potentially earn $200,000 or more annually, especially in high-demand industries or senior roles. Achieving this salary often requires a combination of technical expertise, strategic planning, and leadership responsibilities.

How much does a cyber policy analyst make?

A cybersecurity policy analyst typically earns between $70,000 and $120,000 annually, depending on experience, education, and location. Entry-level positions may start lower, while experienced analysts with certifications like CISSP or CISM can earn higher salaries, especially in larger organizations or high-demand regions.

How does a Cybersecurity Policy Analyst typically collaborate with technical and non-technical teams within an organization?

A Cybersecurity Policy Analyst often acts as a bridge between technical security teams and non-technical stakeholders such as legal, compliance, and executive leadership. They interpret complex cybersecurity regulations and translate them into actionable policies that align with organizational goals. Regular collaboration involves attending cross-functional meetings, providing policy guidance during security incidents, and ensuring everyone understands their roles in maintaining compliance. This collaborative environment helps ensure that security policies are both technically sound and practically applicable across the organization.

What are the key skills and qualifications needed to thrive as a Cybersecurity Policy Analyst, and why are they important?

To thrive as a Cybersecurity Policy Analyst, you need a strong understanding of cybersecurity principles, risk management, regulatory frameworks, and typically a degree in cybersecurity, information technology, or a related field. Familiarity with policy development tools, compliance management systems, and certifications like CISSP or CISM are often required. Excellent analytical thinking, communication, and stakeholder engagement skills will help you translate technical risks into actionable policy recommendations. These skills ensure organizations develop effective security policies that comply with regulations and mitigate cyber threats.

Can you make $500,000 a year in cyber security?

Cybersecurity Policy Analysts typically earn salaries ranging from $70,000 to $150,000 annually, depending on experience, location, and employer. Reaching a $500,000 annual salary generally requires senior roles such as Chief Information Security Officer (CISO) or executive-level positions, which often involve extensive experience, advanced certifications, and leadership responsibilities.
More about Cybersecurity Policy Analyst jobs
What cities are hiring for Cybersecurity Policy Analyst jobs? Cities with the most Cybersecurity Policy Analyst job openings:
What are the most commonly searched types of Cybersecurity Policy Analyst jobs? The most popular types of Cybersecurity Policy Analyst jobs are:
What states have the most Cybersecurity Policy Analyst jobs? States with the most job openings for Cybersecurity Policy Analyst jobs include:
What job categories do people searching Cybersecurity Policy Analyst jobs look for? The top searched job categories for Cybersecurity Policy Analyst jobs are:
Cybersecurity Policy Analyst jobs near you
Policy Analyst

Policy Analyst

ManTech International

Saint Louis, MO • On-site

Full-time

Posted 17 days ago

Key responsibilities

  • Lead the development, review, and coordination of corporate, IT service, and cybersecurity/information assurance policies to ensure enterprise-wide alignment.

  • Direct the creation of Subject Matter Expert self-inspection checklists to facilitate monitoring, implementation tracking, and regulatory adherence.

  • Lead specialized analysis to identify policy gaps and conduct assessments to drive data-informed policy revisions and updates.

ManTech rating

9.0

Company rating: 9.0 out of 10

Based on 14 frontline employees who took The Breakroom Quiz

27th of 202 rated software companies

Job description

General information
Requisition #
R67680
Locations
USA-MO-St. Louis
Posting Date
05/13/2026
Security Clearance Required
TS/SCI
Remote Type
Onsite
Time Type
Full time
Description & Requirements
Unlock the secrets of intelligence with MANTECH! Join a dynamic team at the forefront of national security, providing advanced solutions to government intelligence agencies. Since 1968, we've been solving the toughest challenges with groundbreaking tech. Explore thrilling projects in Digital Transformation, Cybersecurity, IT, Data Analytics and Software Development. Elevate your career and make a difference. Your adventure begins now-unleash your potential with MANTECH!
***This is for a future opportunity***
MANTECH seeks a motivated, career and customer-oriented Policy Analyst to join our team in St. Louis, MO. This role is 100% on-site.
The Policy Analyst advises, assists, leads, manages, and works all policy development, review, coordination, adjudication, promulgation, communication, and compliance in accordance with NGA's Policy Life Cycle Management (PLCM) process. This role supports Subject Matter Expert (SME) development, coordination, and maintenance of all assigned policies, self-inspection checklists, and gap analyses.
Responsibilities include but are not limited to:
  • Lead the development, review, and coordination of corporate, IT service, and cybersecurity/information assurance policies to ensure enterprise-wide alignment.
  • Direct the creation of SME self-inspection checklists to facilitate rigorous monitoring, implementation tracking, and regulatory adherence.
  • Lead specialized SME analysis to identify policy gaps, conducting deep-dive assessments to drive data-informed revisions and updates.
  • Execute IV&V protocols to ensure all policy issuances are fact-based, accurate, and consistent with strategic planning and external mandates.
  • Support the design and implementation of optimized policy workflows to enhance administrative efficiency and organizational agility.
  • Manage the tracking and reporting of policy-related metrics and business analytics to measure the effectiveness of governance initiatives.
  • Align internal policy frameworks with the organization's overarching Cybersecurity Strategy to fortify information assurance.
  • Analyze internal documentation and external issuances-including Executive Orders and IC/DoD policies-to proactively mitigate conflicts and address emerging impacts.

Minimum Qualifications:
  • 7+ years of demonstrated experience leading, managing, and working policies in accordance with a Policy Life Cycle Management (PLCM) process
  • Bachelor's Degree in Computer Science, Systems Engineering, Cybersecurity, International Affairs, Policy, or a related field. In lieu of a degree, 10+ years of experience is required.
  • 2+ years of demonstrated experience tracking and managing formal taskers.
  • 2+ years of demonstrated experience in coordinating and collaborating on agency-level support agreements.
  • 2+ years of demonstrated experience reviewing and analyzing high-level governance documents (e.g., agency directives, statutes, Executive Orders).
  • Demonstrated understanding of NIST 800-53 controls, cybersecurity frameworks, and high-level cybersecurity policy.
  • Proven expertise in policy lifecycle management, including the orchestration of strategic agendas, the maintenance of policy compendiums, and the resolution of regulatory gaps and rescissions

Clearance Requirements:
  • Must have a current/active TS/SCI security clearance and be able to obtain a polygraph.

Physical Requirements:
  • The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.

MANTECH considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation.
If you need a reasonable accommodation to apply for a position with MANTECH, please email us at careers@mantech.com and provide your name and contact information.

What ManTech employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply