ZipRecruiter

Log In

1

Cybersecurity Policy Jobs in Virginia (NOW HIRING)

Credence

Cybersecurity Engineer

Mclean, VA · On-site

$140K - $200K/yr

Support the overall DoD implementation of its authorization process, including cybersecurity policy and procedures. * Authorize information systems or serve as a SME for systems undergoing ...

Credence

Cybersecurity Engineer

Mclean, VA · On-site

$140K - $200K/yr

Support the overall DoD implementation of its authorization process, including cybersecurity policy and procedures. * Authorize information systems or serve as a SME for systems undergoing ...

Credence

Cybersecurity Engineer

Mclean, VA · On-site

$140K - $200K/yr

Support the overall DoD implementation of its authorization process, including cybersecurity policy and procedures. * Authorize information systems or serve as a SME for systems undergoing ...

Amentum

Cybersecurity Analyst

Mclean, VA · On-site

It supports the implementation of RMF by developing documentation and updating policies, procedures, and processes as assigned. The Cybersecurity Analyst will assess and mitigates system security ...

Pae

Cybersecurity Analyst

Mclean, VA · On-site

It supports the implementation of RMF by developing documentation and updating policies, procedures, and processes as assigned. The Cybersecurity Analyst will assess and mitigates system security ...

Tulk LLC

Policy Analyst Mid

Fort Belvoir, VA · On-site

$124K - $148K/yr

Support the organization's Cybersecurity Strategy. * Analyze internal documents and external issuances (e.g., IC/DoW policy, Executive Orders) to identify policy impacts, conflicts, or gaps. Required ...

Everwatch

Policy Analyst, Mid

Springfield, VA

$62.50 - $72.12/hr

Support policy development, review, coordination, and compliance for corporate policies, IT services policies, cybersecurity, and information assurance policies. * Support the development of SME self ...

Everwatch

Policy Analyst, Mid

Springfield, VA

$62.50 - $72.12/hr

Support policy development, review, coordination, and compliance for corporate policies, IT services policies, cybersecurity, and information assurance policies. * Support the development of SME self ...

next page

Showing results 1-20

All JobsCybersecurity Policy JobsCybersecurity Policy Jobs in Virginia

Cybersecurity Policy information

See Virginia salary details

$56.5K

$131.8K

$184.4K

How much do cybersecurity policy jobs pay per year?

As of Jul 26, 2026, the average yearly pay for cybersecurity policy in Virginia is $131,822.00, according to ZipRecruiter salary data. Most workers in this role earn between $110,000.00 and $148,700.00 per year, depending on experience, location, and employer.

What are the typical daily responsibilities for someone working in Cybersecurity Policy?

Professionals in Cybersecurity Policy typically spend their days developing, reviewing, and updating security policies and procedures to keep pace with emerging threats and regulatory requirements. They collaborate closely with IT, legal, and business teams to ensure comprehensive risk management and compliance throughout the organization. Regular activities also include conducting policy audits, preparing compliance documentation, and providing internal training or guidance on policy-related matters. This role requires balancing technical knowledge with organizational priorities, making it both dynamic and impactful.

What is a Cybersecurity Policy job?

A Cybersecurity Policy job involves developing, implementing, and maintaining security policies to protect an organization's digital assets and data. Professionals in this role ensure compliance with regulations, assess security risks, and create guidelines for safe computing practices. They often collaborate with IT, legal, and executive teams to address security threats and policy updates. This role requires knowledge of cybersecurity frameworks, risk management, and regulatory standards like NIST, ISO 27001, or GDPR.

What are the key skills and qualifications needed to thrive in the Cybersecurity Policy position, and why are they important?

Thriving in a Cybersecurity Policy role requires a strong grasp of information security principles, risk assessment frameworks, and relevant legal and regulatory standards, often backed by a degree in cybersecurity, information technology, or a related field. Familiarity with common cybersecurity tools (such as GRC platforms), industry certifications like CISSP or CISA, and experience with compliance management systems is highly valued. Excellent analytical thinking, written communication, and stakeholder collaboration skills help bridge technical requirements with organizational objectives. These skills ensure that policies are both practical and compliant, effectively reducing cyber risks in a constantly evolving threat landscape.

What are the most commonly searched types of Cybersecurity Policy jobs in Virginia? The most popular types of Cybersecurity Policy jobs in Virginia are:
What are popular job titles related to Cybersecurity Policy jobs in Virginia? For Cybersecurity Policy jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Cybersecurity Policy jobs in Virginia look for? The top searched job categories for Cybersecurity Policy jobs in Virginia are:
What cities in Virginia are hiring for Cybersecurity Policy jobs? Cities in Virginia with the most Cybersecurity Policy job openings:
Cybersecurity Policy jobs near you
Infographic showing various Cybersecurity Policy job openings in Virginia as of July 2026, with employment types broken down into 84% Full Time, 6% Part Time, and 10% Contract. Highlights an 94% In-person, and 6% Hybrid job distribution, with an average salary of $131,822 per year, or $63.4 per hour.
Cybersecurity Subject Matter Expert Lead (59834)

Cybersecurity Subject Matter Expert Lead (59834)

Beshenich & Muir Associates

Fort Myer, VA • On-site, Remote

Full-time

Medical, Dental, Vision, Retirement

Posted 21 days ago

Job description

BMA is seeking a Cybersecurity Subject Matter Expert - Leadto support the DLA JETS Cybersecurity Policy and Oversight Support Services (CPOSS) program. This is a fully remote position and contingent on contract award.
Job Summary
BMA is seeking a Cybersecurity Subject Matter Expert (CS SME) - Lead to support our DLA Cybersecurity Policy and Oversight Support Services (CPOSS) contract. The CS SME - Lead provides senior-level technical leadership and advisory support to the CPOSS program supporting DLA's J6/J611 Cybersecurity Directorate. The SME serves as the principal cybersecurity authority for complex technical and governance challenges related to the enterprise Risk Management Framework (RMF) program, cybersecurity policy development, continuous monitoring, and control validation activities across the DLA enterprise. Working under consultative direction, the SME independently evaluates exceptionally complex cybersecurity issues, develops innovative solutions, and provides authoritative technical guidance to government leadership, Security Control Assessors (SCAs), Authorizing Officials (AOs), and enterprise cybersecurity stakeholders. The role also contributes to the development of enterprise cybersecurity methodologies, advanced assessment techniques, and improved cybersecurity governance practices aligned with DoD cybersecurity policy and DLA strategic initiatives.
Key Responsibilities
  1. Enterprise Cybersecurity Technical Leadership: Serves as the senior technical advisor to the DLA cybersecurity assessment and oversight program, providing expert interpretation of cybersecurity policies, standards, and technical requirements. Provides authoritative guidance on complex cybersecurity issues involving enterprise systems, networks, applications, enclaves, and emerging technologies. Analyzes highly complex cybersecurity challenges and recommends innovative solutions that balance mission requirements, operational risks, and regulatory compliance.
  2. RMF and Cybersecurity Assessment Expertise: Provides subject matter expertise on implementation and governance of the DoDI 8510.01 Risk Management Framework for DoD IT across DLA information systems. Advises government stakeholders on security control validation, risk assessments, and authorization readiness determinations. Provides technical review of security control assessments, continuous monitoring activities, and RMF authorization packages submitted through eMASS. Supports development of enterprise-level recommendations regarding residual risk acceptance and cybersecurity posture improvements.
  3. Cybersecurity Tools, Standards, and Architecture Support: Evaluates cybersecurity tools and technologies to support enterprise security assessment, monitoring, and compliance activities. Recommends cybersecurity software solutions and assists in defining functional and technical requirements for tool selection. Supports development of product-specific Security Technical Implementation Guides (STIGs) based on Defense Information Systems Agency Security Requirements Guides (SRGs). Provides technical leadership in evaluating network security architectures, vulnerability assessment methodologies, and cybersecurity implementation strategies.
  4. Enterprise Cybersecurity Policy and Methodology Development: Contributes to the development of new cybersecurity principles, methodologies, and governance practices that improve the DLA enterprise cybersecurity program. Provides expert guidance in the development and refinement of enterprise cybersecurity policies, directives, and standard operating procedures supporting the CPOSS program. Supports the development of advanced cybersecurity concepts and technical approaches that strengthen enterprise security posture and compliance with DoD cybersecurity regulations.
  5. Strategic Analysis and Innovation: Conducts research and analysis of emerging cybersecurity threats, technologies, and best practices relevant to the DLA mission environment. Develops innovative approaches for improving cybersecurity assessment processes, continuous monitoring practices, and enterprise risk management strategies. Identifies opportunities to enhance cybersecurity oversight capabilities through improved tools, automation, analytics, and governance frameworks.
  6. Senior-Level Advisory and Communication Support: Provides expert written and oral briefings to senior government leadership regarding cybersecurity risks, program status, and recommended solutions. Prepares technical reports, white papers, and presentations addressing enterprise cybersecurity challenges.

Clearance Requirements
There is a Secret Security clearance requirement for this position.
Required Skills & Certifications
  • Current DoD 8670.01/8140 IAM Level III certification that includes one or more of the following: ISACA CISM, ISC2 Certified Information Systems Security Professional (CISSP), GIAC/SANS GIAS Security Leadership Certification (GSLC), or EC-Council Certified Chief Information Security Officer (CCISO).
  • 7+ years of Information Technology experience.
  • 5+ years of Information Assurance / Cybersecurity experience.
  • Demonstrated expertise in cybersecurity assessment methodologies, risk analysis, and enterprise cybersecurity governance.
  • Strong analytical and problem-solving skills with the ability to resolve complex cybersecurity challenges.
  • In-depth knowledge of DoD cybersecurity regulations and guidance, including RMF implementation.
  • Strong familiarity with Defense Information Systems Agency STIGs and Security Requirements Guides (SRGs).
  • Demonstrated ability to develop and evaluate cybersecurity technologies, architectures, and security solutions.
  • Exceptional technical leadership and independent decision-making ability.
  • Ability to translate complex cybersecurity issues into clear, actionable guidance for senior leadership.
  • Strong written and oral communication skills capable of supporting executive-level briefings.
  • Proven ability to innovate and develop new cybersecurity concepts, processes, and technical solutions.
  • Demonstrated ability to work independently toward long-range cybersecurity program objectives.

Desired Skills & Certifications
  • Experience supporting DoD or DLA program offices.
  • Experience supporting DoD DLA environments.
  • Experience leading enterprise-level cyber modernization initiatives.
  • Familiarity with DLA-specific cybersecurity governance frameworks.
  • Current Project Management Professional (PMP) certification.
  • Current Risk Management Professional certification such as one or more of the following: PMP-RMP, ISACA Certified in Risk and Information Systems Control (CRISC), ISACA Certified Information Systems Auditor (CISA), ISACA Certified Information Security Manager (CISM), ISC2 Certified in Governance, Risk and Compliance (CGRC), or Risk and Insurance Management Society (RIMS) Certified Risk Management Professional (RIMS-CRMP).

Other Duties
  • Able to travel within a week's notice.
  • This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job.
  • Duties, responsibilities, and activities may change at any time with or without notice.

Overview
BMA is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering all levels of our staff to make timely decisions to produce high-quality results. BMA fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.
Benefits
We believe that our employees well-being is paramount to our success so our benefits package has been crafted with that in mind. We offer multiple healthcare coverage options to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) option. Along with medical coverage, employees have dental, vision, accident & illness, short- and long-term disability all available to them. BMA proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance. Lastly, being an employee-owned company means that BMA offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees the opportunity to earn stock in BMA, subject to plan eligibility and vesting requirements.
AAP & EEO Statement
Beshenich Muir & Associates, LLC (BMA) is an Equal opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law.

Apply