ZipRecruiter

Log In

1

Certified Risk Manager Jobs in Frederick, MD (NOW HIRING)

Customer Value Partners

Risk Manager

Rockville, MD · On-site

Certified Information Systems Auditor (CISA) * Certified Information Security Manager (CISM) * Certified in Risk and Information Systems Control (CRISC) * Familiarity with Information Technology ...

Customer Value Partners

Risk Manager

Rockville, MD

$155K - $165K/yr

Certified Information Systems Auditor (CISA) * Certified Information Security Manager (CISM) * Certified in Risk and Information Systems Control (CRISC) * Familiarity with Information Technology ...

Customer Value Partners

Risk Manager

Rockville, MD

Certified Information Systems Auditor (CISA) * Certified Information Security Manager (CISM) * Certified in Risk and Information Systems Control (CRISC) * Familiarity with Information Technology ...

Customer Value Partners

Risk Manager

Rockville, MD

Certified Information Systems Auditor (CISA) * Certified Information Security Manager (CISM) * Certified in Risk and Information Systems Control (CRISC) * Familiarity with Information Technology ...

Horizon Farm Credit

IRC Analyst

Westminster, MD · On-site

$70K - $110K/yr

Professional certifications such as CIA, CPA, or CISA preferred. * Generally, three to five years of risk management experience preferred. Preferred Skills * Advanced understanding of business ...

Horizon Farm Credit

IRC Analyst

Westminster, MD · Hybrid

$70K - $110K/yr

Professional certifications such as CIA, CPA, or CISA preferred. * Generally, three to five years of risk management experience preferred. Preferred Skills * Advanced understanding of business ...

PNC Bank

Branch Manager

Frederick, MD · On-site

Accountable for risk management and compliance in a complex business environment. Builds a high ... Education No Degree Certifications No Required Certification(s) Licenses Candidates being ...

PNC Bank

Branch Manager

Potomac, MD

Accountable for risk management and compliance . Builds a high performing team through the ... Education No Degree Certifications No Required Certification(s) Licenses Candidates being ...

System One

Jr. GRC Analyst

Rockville, MD · On-site

Cybersecurity, audit, or compliance-related certifications Experience: Required * One (1) year of experience in Information Security, IT Governance, Risk Management, Compliance, Audit, Information ...

System One

Jr. GRC Analyst

Rockville, MD · On-site

Cybersecurity, audit, or compliance-related certifications Experience: Required * One (1) year of experience in Information Security, IT Governance, Risk Management, Compliance, Audit, Information ...

System One Holdings, LLC

Jr. GRC Analyst

Rockville, MD · On-site

$35 - $40/hr

Cybersecurity, audit, or compliance-related certifications Experience: Required * One (1) year of experience in Information Security, IT Governance, Risk Management, Compliance, Audit, Information ...

GDH

EHS Manager

Dulles, VA · On-site

$120K - $150K/yr

The role requires strategic leadership, program development, and risk management to ensure a safe ... Certification such as CSP, OSHA 30/501/2015 courses, and other relevant safety certifications ...

next page

Showing results 1-20

All JobsCertified Risk JobsCertified Risk Manager JobsCertified Risk Manager Jobs in Frederick, MD

Certified Risk Manager information

See Frederick, MD salary details

$51.2K

$110.9K

$169K

How much do certified risk manager jobs pay per year?

As of Aug 6, 2026, the average yearly pay for certified risk manager in Frederick, MD is $110,917.00, according to ZipRecruiter salary data. Most workers in this role earn between $89,500.00 and $128,300.00 per year, depending on experience, location, and employer.

How does a Certified Risk Manager typically collaborate with other departments to manage organizational risk?

Certified Risk Managers work closely with teams across finance, operations, compliance, and executive leadership to identify, assess, and mitigate potential risks. They often lead cross-functional risk assessments and facilitate communication between departments to ensure everyone understands the organization's risk appetite and control measures. Collaboration is key, as risk managers translate complex risk data into actionable strategies that align with overall business objectives. Regular meetings and training sessions are common to keep all teams informed and engaged in proactive risk management.

What can I do with a Certified Risk Manager certification?

A Certified Risk Manager (CRM) certification qualifies professionals to work in risk management roles across various industries, including insurance, finance, and corporate sectors. It demonstrates expertise in identifying, assessing, and mitigating risks, often leading to positions such as risk analyst, risk manager, or risk consultant. The certification also enhances skills in risk assessment tools and frameworks, supporting career advancement and increased responsibilities.

What is a Certified Risk Manager?

A Certified Risk Manager (CRM) is a professional who has completed specialized education and training in identifying, analyzing, controlling, financing, and administering risks within an organization. The CRM designation is awarded after successfully completing a series of courses and exams covering key areas of risk management. CRMs typically work in industries such as insurance, finance, and corporate risk management, helping organizations minimize losses and improve their overall risk strategies. This certification demonstrates a high level of expertise and commitment to best practices in risk management.

What are the key skills and qualifications needed to thrive as a Certified Risk Manager, and why are they important?

To thrive as a Certified Risk Manager, you need expertise in risk assessment, regulatory compliance, and enterprise risk management, typically supported by a bachelor's degree and a CRM certification. Familiarity with risk management software, data analysis tools, and industry-specific regulatory systems is essential. Strong analytical thinking, decision-making, and communication skills enable effective collaboration and leadership in identifying and mitigating risks. These competencies are crucial for protecting organizational assets, ensuring compliance, and supporting strategic business objectives.

How do you become a certified risk manager?

To become a certified risk manager, individuals typically need to gain relevant work experience in risk management or related fields, and then earn a professional certification such as the Certified Risk Manager (CRM) or Associate in Risk Management (ARM). These certifications require passing exams that cover risk assessment, control, financing, and governance, often supported by continuing education and adherence to ethical standards.

What is the difference between Certified Risk Manager vs Risk Analyst?

AspectCertified Risk ManagerRisk Analyst
CertificationsCertified Risk Manager (CRM), other risk management certificationsOften holds certifications like FRM or CRM, but not always
Work EnvironmentCorporate risk management departments, consulting firmsFinancial institutions, insurance companies, corporate risk teams
Primary FocusDeveloping risk management strategies, mitigation plansAnalyzing data to identify and assess risks

The main difference is that Certified Risk Managers focus on creating and implementing risk management strategies, while Risk Analysts primarily analyze data to identify potential risks. CRM professionals often hold specialized certifications and work in strategic roles, whereas Risk Analysts focus on data analysis within various industries. Both roles are essential in managing organizational risks but serve different functions within the risk management process.

What are popular job titles related to Certified Risk Manager jobs in Frederick, MD? For Certified Risk Manager jobs in Frederick, MD, the most frequently searched job titles are:
What job categories do people searching Certified Risk Manager jobs in Frederick, MD look for? The top searched job categories for Certified Risk Manager jobs in Frederick, MD are:
What cities near Frederick, MD are hiring for Certified Risk Manager jobs? Cities near Frederick, MD with the most Certified Risk Manager job openings:
Certified Risk Manager jobs near you
Infographic showing various Certified Risk Manager job openings in Frederick, MD as of August 2026, with employment types broken down into 83% Full Time, 16% Part Time, and 1% Contract. Highlights an 84% Physical, 3% Hybrid, and 13% Remote job distribution, with an average salary of $110,917 per year, or $53.3 per hour.

Risk Manager

Customer Value Partners

Rockville, MD • On-site

Full-time

Re-posted 13 days ago

Job description

Overview
CVP is seeking an Cybersecurity Risk Manager for a large government agency enterprise-level cybersecurity program. The Cybersecurity Risk Manager will work directly with the Cybersecurity Program Manager and the agency's CIO and CISO in cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security reporting; and other information security-related tasks.
Responsibilities
  • Identify, evaluate, and develop strategies for handling risks to reduce information security and privacy risk across the agency.
  • Provide recommendations, guidance, planning, and implementation support for agency risk management activities and tools, and provide support as needed to enhance the agency's Information Security Program related to governance, optimizations, automation, and supporting tools.
  • Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for Information Systems and Organizations and SP 800-39, Managing Information Security Risk (as revised).
  • Conducting an enterprise risk assessment and developing an agency Information Security Risk Assessment Report that addresses all findings from the assessment
  • Developing an agency Privacy and Security Roadmap that recommends privacy and information security capabilities based on risks identified in the agency's Information Security Risk Assessment Report
  • Developing an agency Information Security Risk Management Plan that addresses how the agency will implement and perform risk management activities regarding risk tolerance, risk assessment, risk response, risk monitoring, and risk capabilities
  • Providing risk management guidance to the agency offices for A&A activities as required, ensuring continuous risk monitoring of information security control implementation effectiveness and required information security compliance requirements
  • Support the Information Security and Assurance Office (ISAO) in implementing and overseeing the organization's information security risk management and security assessment and authorization (A&A) activities.
  • Advise the agency on how best to tailor the revised A&A process to handle non-traditional technologies including, but not limited to, cloud, mobile, and Internet of Things.
  • Provide the agency recommendations on how it can continuously monitor and assess the security posture of agency information systems over time and alert agency decision makers when an information system presents an increased risk or eminent threat to agency data and/or operations.
  • Develop guidance, templates, other tools, and advice to the program offices to support their risk management and ATO activities.
  • Provide risk management and information security continuous monitoring program implementation recommendations to program offices
  • Track and review Plans of Actions and Milestones (POA&Ms) agency-wide to identify areas of risk as a result of unimplemented POA&Ms, a buildup of risk-based decisions, or other cross-cutting issues observed as a result of its risk management support.
  • Track the A&A status for all divisions and programs that have information systems to validate they meet the requirements to protect the agency's data and operations.
  • Develop the required artifacts to complete security accreditation packages for OCIO information systems and perform any required assessments, as requested. The Contractor shall provide oversight and advisory support to agency program office personnel for completion of information system A&A packages, as requested.
  • Follow NIST Federal Information Processing Standards (FIPS) and Special Publications (SPs) to include, but not limited to, FIPS 199 and 200, SP 800-39, SP 800-37, SP 800-137, SP 800-60, SP 800-53, SP 800-53A, SP 800-34, SP 800-30, and SP 800-18. The Contractor shall comply with all agency IT security and Privacy policies and standards including, and the agency Privacy Impact Assessment (PIA) requirements and associated templates.

Qualifications
  • Minimum of six years' experience in cybersecurity. 10+ years' experience is preferred.
  • Minimum of six years' experience leading and delivering in FISMA-based and FedRAMP Assessment and Authorization (A&A) programs for comparably sized federal agencies and programs. Seven plus years' experience is preferred.
  • Shall have at least one of the following industry-recognized certifications:
    • Certified Information System Security Professional (CISSP)
    • Certified Information Systems Auditor (CISA)
    • Certified Information Security Manager (CISM)
    • Certified in Risk and Information Systems Control (CRISC)
  • Familiarity with Information Technology Infrastructure Library (ITIL) Foundation Compliance (GRC) tool, continuous monitoring, and vulnerability management tools or services. Note: NIH currently uses CSAM.
  • Demonstrated experience managing cybersecurity teams including personnel, workload, priorities, scheduling, and risks.
  • Proven experience bringing innovative approaches to help reduce the FISMA workload and time to authorization/reauthorization through such methods as boundary consolidation, common control identification and re-use, automation, assessment readiness reviews, and digital transformation.

Desired Skills
  • PMP Certification
  • CISSP Certification
  • Experience with Security Assessment Tools (Tenable Nessus, DBProtect, Wireshark, WebInspect)
  • NIH/HHS experience

Location
  • Rockville, MD (Hybrid)

Salary Band: $155-165k (Depending on experience)
About CVP
CVP is an award-winning healthcare and next-gen technology and consulting services firm solving critical problems for healthcare, national security, and public sector clients. We help organizations achieve lasting transformation.
CVP is an Equal Opportunity Employer dedicated to actively recruiting individuals and providing advancement opportunities based on merit and legitimate job qualifications. We ensure that all associates receive equal opportunities based on their personal qualifications and job requirements. CVP strictly prohibits any form of discrimination or harassment.
At CVP, we cultivate a work environment that encourages fairness, teamwork, and respect among all associated. We are committed to maintaining a workplace where everyone can grow both personally and professionally.

Apply