Job description

Cybersecurity Policy Analyst / Expert Washington, DC / Onsite Blu Omega is seeking a Cybersecurity Policy Analyst / Expert to support a federal program focused on cybersecurity strategy, governance, and policy. This role operates within the Washington, DC Metro Area and is responsible for supporting cybersecurity development, risk management, compliance, and advisory efforts for federal and defense missions. The position requires experience with cybersecurity policy, frameworks, and stakeholder communication in a government environment. Program Overview Program: Support cybersecurity strategy, governance, policy, compliance, and advisory efforts for federal and defense missions. Key Details Location: Washington, DC / Onsite Clearance: Active Secret, Top Secret, or TS/SCI required Work Authorization: U.S. Citizen Schedule: Primarily onsite; hybrid may be available depending on customer requirements Responsibilities • Support development, review, and implementation of cybersecurity policies, procedures, standards, and guidance. • Analyze federal, DoD, and agency requirements and translate them into actionable guidance. • Support RMF, ATO, cyber governance, compliance, and risk activities. • Develop technical and policy documentation, briefings, assessments, and decision-support materials. • Support cybersecurity strategy discussions with government stakeholders and mission partners. • Assess cyber risks, policy gaps, control requirements, and compliance impacts. • Coordinate with cybersecurity engineers, ISSOs, ISSMs, system owners, and government customers. • Communicate cybersecurity findings and recommendations to technical and non-technical audiences. Required Qualifications • Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Public Policy, Engineering, or related discipline. • Experience supporting cybersecurity policy, governance, compliance, RMF, ATO, or cyber advisory work. • Knowledge of frameworks such as NIST RMF, NIST SP 800-53, FISMA, FedRAMP, DoD RMF, Zero Trust, and ATO processes. • Experience developing policy documents, briefings, reports, assessments, or compliance artifacts. • Ability to communicate cybersecurity risks and recommendations clearly to stakeholders. • Active U.S. government security clearance at the Secret level or higher. • U.S. Citizenship required. Preferred Qualifications • Active Top Secret or TS/SCI clearance. • Experience supporting DoD CIO, Intelligence Community, military, or national security cyber programs. • Knowledge supporting cyber strategy, policy modernization, or cyber risk management. • Familiarity with ISSO / ISSM, control assessments, POA&Ms, SSPs, audit readiness, or continuous monitoring. • Relevant cybersecurity certifications such as Security+, CISSP, CISM, CAP, CASP+, CRISC, or CGRC. • Experience with client-facing advisory work and senior stakeholder briefings. Compensation Salary Range: $110,000 – $190,000 per year Final compensation is based on technical skills, experience, education, certifications, and clearance. Blu Omega Benefits & Perks • Medical, Dental, and Vision coverage through national providers • 401(k) with company match (eligible after 6 months; vesting applies) • Company-paid Life and AD&D insurance with additional voluntary options • Short-term and long-term disability options • Employee Assistance Program (EAP) with mental health resources • Telehealth and virtual care options • Pet insurance, legal services, and identity theft protection options • Paid Time Off (PTO) and federal holidays • Wellness programs and lifestyle benefits • Benefits eligibility varies based on role and employment status Company Overview Blu Omega is a Woman-Owned Small Business (WOSB) delivering technology, data, engineering, cybersecurity, and mission support services to federal agencies and enterprise clients nationwide. Headquartered in Ashburn, VA, we support critical government initiatives across civilian and defense sectors, including health, national security, and regulatory environments. Our team provides expertise in cybersecurity operations, cloud and infrastructure modernization, data and analytics, and enterprise IT support within federal contracting environments. Equal Opportunity Employer All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status, or any other protected characteristic. #CJ #LI-Onsite

Requirements

Must-haves

Cybersecurity Policy Analyst / Expert
Washington, DC / Onsite
Program Overview
Program: Support cybersecurity strategy, governance, policy, compliance, and advisory efforts for federal and defense missions.
Location: Washington, DC / Onsite
Clearance: Active Secret, Top Secret, or TS/SCI required
Work Authorization: U.S. Citizen
Schedule: Primarily onsite; hybrid may be available depending on customer requirements
Support development, review, and implementation of cybersecurity policies, procedures, standards, and guidance.
Analyze federal, DoD, and agency requirements and translate them into actionable guidance.
Support RMF, ATO, cyber governance, compliance, and risk activities.
Develop technical and policy documentation, briefings, assessments, and decision-support materials.
Support cybersecurity strategy discussions with government stakeholders and mission partners.
Assess cyber risks, policy gaps, control requirements, and compliance impacts.
Coordinate with cybersecurity engineers, ISSOs, ISSMs, system owners, and government customers.
Communicate cybersecurity findings and recommendations to technical and non-technical audiences.
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Public Policy, Engineering, or related discipline.
Experience supporting cybersecurity policy, governance, compliance, RMF, ATO, or cyber advisory work.

Nice-to-haves

Active Top Secret or TS/SCI clearance.
Experience supporting DoD CIO, Intelligence Community, military, or national security cyber programs.
Knowledge supporting cyber strategy, policy modernization, or cyber risk management.
Familiarity with ISSO / ISSM, control assessments, POA&Ms, SSPs, audit readiness, or continuous monitoring.
Relevant cybersecurity certifications such as Security+, CISSP, CISM, CAP, CASP+, CRISC, or CGRC.
Experience with client-facing advisory work and senior stakeholder briefings.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: bullhorn
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off

Wellness