1

Executive Cybersecurity Policy Jobs (NOW HIRING)

Cybersecurity Policy Lead Location: Washington, DC Clearance: Secret Duties and Responsibilities ... Executive Orders (EOs), OMB memos, Public Law (PL), DHS directives such as Binding Operational ...

Cybersecurity Policy Writer & Governance Lead Description - Job Summary We are seeking a strategic ... This role requires strong cross-functional collaboration, executive communication skills, and a ...

Director of Cybersecurity - GRC

Newark, NJ

$116K - $156K/yr

NRC, SOX, DoE, NERC CIP, TSA, Internal Audits, etc.), Cybersecurity Risk, Cybersecurity Policy ... Preparing senior-level technical reports for executive management. * Providing support and risk ...

next page

Showing results 1-20

Executive Cybersecurity Policy information

See salary details

$26.5K

$93.6K

$184K

How much do executive cybersecurity policy jobs pay per year?

As of Jun 8, 2026, the average yearly pay for executive cybersecurity policy in the United States is $93,552.00, according to ZipRecruiter salary data. Most workers in this role earn between $58,000.00 and $120,500.00 per year, depending on experience, location, and employer.

What is the difference between Executive Cybersecurity Policy vs Cybersecurity Analyst?

AspectExecutive Cybersecurity PolicyCybersecurity Analyst
CredentialsTypically requires executive-level certifications (CISM, CISSP), advanced degreesRequires certifications like CompTIA Security+, CISSP, or CEH
Work EnvironmentStrategic, policy development, executive meetingsTechnical, hands-on security monitoring, incident response
Employer & Industry UsageUsed by organizations to set security direction at the policy levelUsed by security teams to implement and monitor security measures

While both roles focus on cybersecurity, the Executive Cybersecurity Policy develops high-level security strategies and policies, whereas the Cybersecurity Analyst executes technical security tasks and monitors systems. The former is more strategic and policy-oriented, while the latter is hands-on and technical.

What are the key skills and qualifications needed to thrive as an Executive in Cybersecurity Policy, and why are they important?

To thrive as an Executive in Cybersecurity Policy, you need a deep understanding of cybersecurity frameworks, risk management, and regulatory compliance, often supported by a relevant degree and certifications such as CISSP or CISM. Familiarity with tools like NIST Cybersecurity Frameworks, ISO 27001, and governance, risk, and compliance (GRC) systems is typically required. Strong leadership, strategic communication, and the ability to influence cross-functional teams are essential soft skills for this role. These skills ensure effective policy development, organizational resilience, and proactive mitigation of evolving cyber threats.

How does the Executive Cybersecurity Policy role typically collaborate with technical and non-technical stakeholders within an organization?

Professionals in Executive Cybersecurity Policy roles frequently serve as a bridge between technical cybersecurity teams and executive leadership or regulatory bodies. They translate complex security concepts into actionable policy recommendations for non-technical stakeholders, while also ensuring that technical teams understand and implement these policies effectively. Collaboration often involves leading cross-departmental meetings, aligning cybersecurity initiatives with business objectives, and managing communications during incidents. This role requires strong interpersonal skills and the ability to balance diverse perspectives to achieve comprehensive cybersecurity governance.

What is Executive Cybersecurity Policy?

Executive Cybersecurity Policy refers to the high-level strategies, guidelines, and decisions made by organizational leaders to protect digital assets and information systems. This role involves developing, implementing, and overseeing policies that address cybersecurity risks, compliance, and incident response. Executives in this field work closely with IT, legal, and business teams to ensure that cybersecurity measures align with organizational goals and regulatory requirements. Their leadership is critical in fostering a security-conscious culture and responding effectively to emerging cyber threats.
What cities are hiring for Executive Cybersecurity Policy jobs? Cities with the most Executive Cybersecurity Policy job openings:
What are the most commonly searched types of Cybersecurity Policy jobs? The most popular types of Cybersecurity Policy jobs are:
What states have the most Executive Cybersecurity Policy jobs? States with the most job openings for Executive Cybersecurity Policy jobs include:
Cybersecurity Policy Lead

Cybersecurity Policy Lead

gTANGIBLE

Washington, DC โ€ข On-site

Full-time

Posted 19 days ago


Job description

gTANGIBLE Corporation (gTC), www.gtangible.com, is a C corporation and a registered Government contractor that provides services and solutions in:

  • National Security Programs
  • Professional, Administrative, and Management Support
  • Mission and Warfighter Support

We are a Service Disabled Veteran Owned Small Business (SDVOSB) and the founder has years of successful experience in the Government contracting arena. Our leadership team is an exceptional group of Government contracting professionals. gTANGIBLE is in the process of identifying candidates for the following position.

Requisition Type: Full Time

Position Status: Contingent

Position Title: Cybersecurity Policy Lead

Location: Washington, DC

Clearance: Secret

Duties and Responsibilities

The Cybersecurity Policy Lead will oversee research on cybersecurity policies, address inquiries, and assist TSA in updating relevant policies and procedures to ensure polices are update to date with latest guidance from National Institute of Standards and Technology (NIST), DHS, or TSA. Duties include the following:

  • Manage the policy inquiry/intake mailbox or policy help desk:
    • Track and resolve cybersecurity policy related questions
    • Conduct internal and external policy research to support help desk policy inquiries using various sources and approved documentation.
  • Review, interpret, edit, create, and update cybersecurity policy related documents:
    • Create new cybersecurity policy documents as needed to address identified gaps or changes emanating from NIST, DHS, or TSA mandates
    • Review DHS 4300A related documentation and provide inputs to management as needed
    • Assist in providing inputs to management regarding the TSA Information Assurance (IA) Handbook
    • Update TSA 1400.3 and IA Handbook annually
    • Modify/update existing Information Assurance and Cybersecurity Division (IAD) cybersecurity-related policy standard operating procedures (SOPs), technical standards (TSs), management directives (MDs), Cybersecurity Cloud Security Handbook (CCSH), TSA Forms, Open Source Software (OSS) guide, SSI Program and Privacy Office related document reviews, and related Notification Memos capturing summary of changes
    • Assist with reviewing and interpreting Executive Orders (EOs), OMB memos, Public Law (PL), DHS directives such as Binding Operational Directives (BODs), DHS Undersecretary Memos, NIST SPs, recommended best practices or other external source documents
    • Assist management in providing inputs for risk assessment memos
    • Meet with Subject Matter Experts (SMEs) to discuss and create and modify applicable policy documentation language.
  • Review ITAR/PR packages and contracts to ensure appropriate IT security language is included.

Knowledge and Qualifications

  • A Bachelor of Science (BS) or Bachelor of Arts (BA) from an accredited school.
  • A minimum of 15 years of IT cybersecurity experience, including direct support for the US Government and 7 years serving as a Policy Analyst for an enterprise IT systems OR a relevant Master's Degree in IT, Computer Science, Business, or Engineering and 10 years' of IT cybersecurity experience including direct support for the US Government and 5 years serving as a Policy Analyst
  • At least one of the following security certifications: Certified Authorization Professional (CAP), Certified Information Systems Security Officer (CISSO), Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP)
  • Knowledge of NIST Guidelines and FISMA Cybersecurity compliance requirements
  • Technical knowledge of complex enterprise IT systems
  • Knowledge and skill with Microsoft Suite such as Word, Excel, PowerPoint, Outlook and SharePoint management
  • Experience communicating effectively, both oral and written, with technical, non-technical, and executive-level customers.

gTANGIBLE Corporation is an equal opportunity employer and does not discriminate against any employee or applicant because of race, age, sex, color, physical or mental disability, religion, sexual orientation, marital status, national origin, or political affiliation.

Employment Type: Full-Time