... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
... commercial best practices relating to cyber security. The candidate must have the ability to be ... The Cyber Risk Management Specialist performs a range of functions before, during, and after an ...
Risk Management Engineer
Vienna, VA · On-site
The Risk Management (RM) Engineer functions as an information system security testing subject ... The ACA Engineer should be familiar with Commercial-Off-The-Shelf (COTS) products used to ...
Risk Management Engineer
Vienna, VA · On-site
The Risk Management (RM) Engineer functions as an information system security testing subject ... The ACA Engineer should be familiar with Commercial-Off-The-Shelf (COTS) products used to ...
The Risk Management (RM) Engineer functions as an information system security testing subject ... The ACA Engineer should be familiar with Commercial-Off-The-Shelf (COTS) products used to ...
The Risk Management (RM) Engineer functions as an information system security testing subject ... The ACA Engineer should be familiar with Commercial-Off-The-Shelf (COTS) products used to ...
We are a not-for-profit corporation chartered to work for the public interest, with no commercial ... The ideal candidate will be a credible authority on critical infrastructure risk management ...
We are a not-for-profit corporation chartered to work for the public interest, with no commercial ... The ideal candidate will be a credible authority on critical infrastructure risk management ...
GBU Risk Manager
Reston, VA · On-site
... management best practices. * Plan, facilitate, and lead risk and opportunity workshops with technical, commercial, and project stakeholders to support informed decision-making and effective risk ...
GBU Risk Manager
Reston, VA · On-site
... management best practices. * Plan, facilitate, and lead risk and opportunity workshops with technical, commercial, and project stakeholders to support informed decision-making and effective risk ...
Supply Chain Risk Management (SCRM) Lead
Falls Church, VA · On-site
$180K - $210K/yr
Review 50-150 commercial software products for supply chain risk. * Analyze software composition ... Vendors Managed: 30-80 requiring assessment per network. * Annual Assessments: 20-40 vendor ...
Quick apply
Supply Chain Risk Management (SCRM) Lead
Falls Church, VA · On-site
$180K - $210K/yr
Review 50-150 commercial software products for supply chain risk. * Analyze software composition ... Vendors Managed: 30-80 requiring assessment per network. * Annual Assessments: 20-40 vendor ...
Analyst - Risk
Chesapeake, VA · On-site
$68K - $83K/yr
The Risk Analyst will hold key responsibilities related to the administrative handling and ... Management team. Principal Duties & Responsibilities: * Assist in the annual renewal of commercial ...
Analyst - Risk
Chesapeake, VA · On-site
$68K - $83K/yr
The Risk Analyst will hold key responsibilities related to the administrative handling and ... Management team. Principal Duties & Responsibilities: * Assist in the annual renewal of commercial ...
Insurance Risk Specialist
Tysons, VA · On-site
$99K/yr
... claims management, or commercial insurance experience. * Demonstrated experience managing or ... Experience utilizing the Origami Risk Management Information System (RMIS) or similar risk ...
Insurance Risk Specialist
Tysons, VA · On-site
$99K/yr
... claims management, or commercial insurance experience. * Demonstrated experience managing or ... Experience utilizing the Origami Risk Management Information System (RMIS) or similar risk ...
Analyst - Risk
Chesapeake, VA · On-site
$68K - $83K/yr
The Risk Analyst will hold key responsibilities related to the administrative handling and ... Management team. Principal Duties & Responsibilities: * Assist in the annual renewal of commercial ...
Analyst - Risk
Chesapeake, VA · On-site
$68K - $83K/yr
The Risk Analyst will hold key responsibilities related to the administrative handling and ... Management team. Principal Duties & Responsibilities: * Assist in the annual renewal of commercial ...
Insurance Risk Specialist
Tysons, VA · On-site
$99K/yr
... claims management, or commercial insurance experience. * Demonstrated experience managing or ... Experience utilizing the Origami Risk Management Information System (RMIS) or similar risk ...
Insurance Risk Specialist
Tysons, VA · On-site
$99K/yr
... claims management, or commercial insurance experience. * Demonstrated experience managing or ... Experience utilizing the Origami Risk Management Information System (RMIS) or similar risk ...
... commercial clients. Our mission is to create one of the nation's great banks, and we have the ... Demonstrates sound lifecycle program management to include documenting and communicating action ...
... commercial clients. Our mission is to create one of the nation's great banks, and we have the ... Demonstrates sound lifecycle program management to include documenting and communicating action ...
... commercial clients. Our mission is to create one of the nation's great banks, and we have the ... Demonstrates sound lifecycle program management to include documenting and communicating action ...
... commercial clients. Our mission is to create one of the nation's great banks, and we have the ... Demonstrates sound lifecycle program management to include documenting and communicating action ...
... commercial clients. Our mission is to create one of the nation's great banks, and we have the ... Demonstrates sound lifecycle program management to include documenting and communicating action ...
... commercial clients. Our mission is to create one of the nation's great banks, and we have the ... Demonstrates sound lifecycle program management to include documenting and communicating action ...
Senior Account Executive, Risk Management
Ashburn, VA · On-site
$200 - $250/hr
This role will oversee the entire Risk Management AE team for staffing, training and account ... State specific license is required 15+ years of commercial insurance work experience with large ...
Posted today
Senior Account Executive, Risk Management
Ashburn, VA · On-site
$200 - $250/hr
This role will oversee the entire Risk Management AE team for staffing, training and account ... State specific license is required 15+ years of commercial insurance work experience with large ...
Posted today
... commercial sectors. We strive to continually improve building energy efficiency and therefore, the ... Monitor Risk Management Program to ensure accuracy and completion of information is collected for ...
Quick apply
... commercial sectors. We strive to continually improve building energy efficiency and therefore, the ... Monitor Risk Management Program to ensure accuracy and completion of information is collected for ...
... commercial sectors. We strive to continually improve building energy efficiency and therefore, the ... Monitor Risk Management Program to ensure accuracy and completion of information is collected for ...
... commercial sectors. We strive to continually improve building energy efficiency and therefore, the ... Monitor Risk Management Program to ensure accuracy and completion of information is collected for ...
Commercial Risk Management information
What is the difference between Commercial Risk Management vs Insurance Underwriter?
| Aspect | Commercial Risk Management | Insurance Underwriter |
|---|---|---|
| Credentials | Certifications like CRM, ARM, CPCU often preferred | Professional designations such as CPCU, ARM, or FCAS common |
| Work Environment | Corporate offices, client meetings, risk assessment teams | Insurance companies, underwriting departments, risk analysis teams |
| Industry Usage | Used across various industries to mitigate business risks | Primarily within insurance companies to evaluate policy applications |
Commercial Risk Management focuses on identifying and mitigating risks for businesses across industries, often working directly with clients. Insurance Underwriters evaluate insurance applications to determine coverage and premiums. While both roles involve risk assessment, Commercial Risk Managers have a broader scope, whereas Underwriters specialize in insurance policy evaluation.
Is commercial risk management a profitable career?
Commercial risk management is generally a well-paying career, especially for professionals with specialized skills, certifications, and experience. Salaries can vary based on industry, location, and level of responsibility, but it is considered a financially rewarding field for those with strong analytical and risk assessment abilities.
What does a commercial risk management do?
A commercial risk management professional identifies, assesses, and mitigates risks that could impact a company's financial performance or operations. They analyze market conditions, contractual obligations, and industry trends to develop strategies that minimize potential losses. Strong analytical skills and knowledge of risk assessment tools are essential in this role.
What are popular job titles related to Commercial Risk Management jobs in Virginia?
For Commercial Risk Management jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Commercial Risk Management jobs in Virginia look for?
The top searched job categories for Commercial Risk Management jobs in Virginia are:
What cities in Virginia are hiring for Commercial Risk Management jobs?
Cities in Virginia with the most Commercial Risk Management job openings:
Job description
Overview
The Cyber Risk Management Specialist (CRMS) will specialize in in-depth knowledge of the program's cyber security hygiene, DevSecOps, Risk Management Framework (RMF), Assessment and Authorization (A&A), Federal Risk and Authorization Management Program (FedRAMP) compliance, continuous ATO (cATO) and continuous monitoring. A solid grasp on confidentiality, integrity, and availability (CIA) security concepts is required. The candidate will be responsible for the technical implementation and enforcement of security hardening, vulnerability management, scan analysis, data analysis for metrics reporting, cloud environments, compliance with Federal regulation and policy, and commercial best practices relating to cyber security. The candidate must have the ability to be flexible and adaptive to a fast-paced, fluid business environment.
Contributions
The role requires strong procedural knowledge of NIST SP 800-37 Risk Management Framework (RMF) for Information Systems and Organization, NIST SP 800-53 Security and Privacy Controls for Information Systems and Organizations, NIST SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations, FedRAMP requirements, cloud environments, cloud cybersecurity architecture, compliance with Federal regulation and policy, and commercial best practices relating to cloud security. The CRMS is expected to efficiently learn and adapt to rapidly changing federal governance frameworks and standards of practice, to include risk treatments for modern and emerging technologies (e,g, AI, blockchain, microservices).
The Cyber Risk Management Specialist performs a range of functions before, during, and after an authorization is granted:
Qualifications
Required
Preferred
About steampunk
Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $100,000 to $150,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk's total compensation package for employees. Learn more about additional Steampunk benefits here.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers - and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.
The Cyber Risk Management Specialist (CRMS) will specialize in in-depth knowledge of the program's cyber security hygiene, DevSecOps, Risk Management Framework (RMF), Assessment and Authorization (A&A), Federal Risk and Authorization Management Program (FedRAMP) compliance, continuous ATO (cATO) and continuous monitoring. A solid grasp on confidentiality, integrity, and availability (CIA) security concepts is required. The candidate will be responsible for the technical implementation and enforcement of security hardening, vulnerability management, scan analysis, data analysis for metrics reporting, cloud environments, compliance with Federal regulation and policy, and commercial best practices relating to cyber security. The candidate must have the ability to be flexible and adaptive to a fast-paced, fluid business environment.
Contributions
The role requires strong procedural knowledge of NIST SP 800-37 Risk Management Framework (RMF) for Information Systems and Organization, NIST SP 800-53 Security and Privacy Controls for Information Systems and Organizations, NIST SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations, FedRAMP requirements, cloud environments, cloud cybersecurity architecture, compliance with Federal regulation and policy, and commercial best practices relating to cloud security. The CRMS is expected to efficiently learn and adapt to rapidly changing federal governance frameworks and standards of practice, to include risk treatments for modern and emerging technologies (e,g, AI, blockchain, microservices).
The Cyber Risk Management Specialist performs a range of functions before, during, and after an authorization is granted:
- Integrate security into DevOps effectively at every stage of the software development life cycle (SDLC).
- Identify security holes and potential breaches, work through multifaceted security issues, and create effective solutions based on understanding of risk posture and treatments.
- Develop and implement tactical strategies for seamless automation to optimize the IT infrastructure.
- Apply specialized knowledge of financial audit standards, classified system IA requirements, and Privacy Act requirements.
- Implement the NIST Special Publication (SP) 800 family of publications, particularly those associated with the Risk Management Framework.
- Evaluating system, network, or infrastructure security controls against requirements such as FISMA, FIPS, and NIST guidelines
- Apply in-depth, hands-on knowledge of the FedRAMP regulations, process, and requirements to lead project and initiative teams in accrediting cloud products and services.
- Support external audits, data calls, and the Authorization to Operate (ATO) process by coordinating with organization system owners, engineers, CSP's and Third-Party Assessment Organizations (3PAO).
- Positively impact the organization's goals and operational mission through various forms of metric performance measuring tools used to evaluate adherences to compliance.
- Advise clients on FedRAMP requirements and provide security guidance on the implementation of security compliance controls per technical, management, and operational requirements.
- Implement, monitor, and assess NIST SP 800-53 security controls for cloud environments to ensure compliance with FedRAMP requirements and governance models.
- Ensure ongoing compliance with FedRAMP policy and requirements through monthly deliverables, regular vulnerability scanning, penetration testing, contingency testing, and annual security assessments performed by a 3PAO.
- Support ATO, cATO, and continuous monitoring activities to include security documentation, audit log, security incidents, and risk assessment.
- Review and manage Plan of Action & Milestones (POA&M), to include remediation tracking and reporting.
Qualifications
Required
- Ability to obtain a U.S. government Security Clearance
- Master's Degree and 6 year of cyber and FISMA experience; OR
- Bachelor's Degree and 8 years of cyber and FISMA experience; OR
- No degree and 12 years of experience, 10 of which must be in cyber and FISMA
- Possesses at least one professional certification: CISSP, CASP, CISA, CISM or GSLC
Preferred
- Experience in FISMA, cloud cybersecurity architecture, compliance with Federal regulation and policy, and commercial best practices relating to cloud security.
- Experience in Information Security processes to include RMF, FedRAMP, Compliance, Continuous Monitoring, and Annual Assessments.
- Certifications in one or more of the following: CISSP, CRICS, CCSP, CAP/CGRC.
- Certifications in one or more of the following: AWS Certified Solutions Architect, AWS Certified Security, Microsoft Certified Solutions Architect, MCSE Cloud Platform and Infrastructure
- Experience conducting assessments in a 3PAO, C3PAO, or risk auditing organization is desirable, but not required.
- Experience supporting systems in Agile environments.
About steampunk
Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $100,000 to $150,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk's total compensation package for employees. Learn more about additional Steampunk benefits here.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers - and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.
About Steampunk
Sourced by ZipRecruiter
Industry
It services
Company size
201 - 500 Employees
Headquarters location
McLean, VA, US