ZipRecruiter

Log In

1

Cyber Risk Management Jobs in Virginia (NOW HIRING)

Steampunk

Cyber Risk Management Specialist

Mclean, VA · On-site

Overview The Cyber Risk Management Specialist (CRMS) will specialize in in-depth knowledge of the program's cyber security hygiene, DevSecOps, Risk Management Framework (RMF), Assessment and ...

Steampunk

Cyber Risk Management Specialist

Mclean, VA · On-site

Overview The Cyber Risk Management Specialist (CRMS) will specialize in in-depth knowledge of the program's cyber security hygiene, DevSecOps, Risk Management Framework (RMF), Assessment and ...

Capital One

Manager, Cyber Risk & Analysis

Mclean, VA · On-site

Manager, Cyber Risk & Analysis As a Manager, you will apply your technical expertise, risk ... The ideal candidate will possess a solid understanding and hands-on experience of risk management ...

Capital One

Manager, Cyber Risk & Analysis

Mclean, VA · On-site

Manager, Cyber Risk & Analysis As a Manager, you will apply your technical expertise, risk ... The ideal candidate will possess a solid understanding and hands-on experience of risk management ...

Jobtailor

Director, Cyber Risk

Sterling, VA · On-site

$180 - $280/hr

Own and continuously improve the cyber and technology risk management framework, methodology, taxonomy, and lifecycle aligned to NIST CSF 2.0, ISO 27001/27005, and applicable regulatory obligations.

Technomics, Inc.

Cyber Risk Analyst SME

Arlington, VA · On-site

We are seeking a Cyber Risk Analyst (SME-level). This role involves conducting on-site and remote ... Create and manage task plans, assessment schedules, and execution strategies to ensure effective ...

Technomics Inc

Cyber Risk Analyst SME

Arlington, VA · On-site

We are seeking a Cyber Risk Analyst (SME-level). This role involves conducting on-site and remote ... Create and manage task plans, assessment schedules, and execution strategies to ensure effective ...

Technomics

Cyber Risk Analyst SME

Arlington, VA · On-site +1

We are seeking a Cyber Risk Analyst (SME-level). This role involves conducting on-site and remote ... Create and manage task plans, assessment schedules, and execution strategies to ensure effective ...

next page

Showing results 1-20

All JobsCyber Risk Management JobsCyber Risk Management Jobs in Virginia

Cyber Risk Management information

See Virginia salary details

$14

$30

$73

How much do cyber risk management jobs pay per hour?

As of Aug 14, 2026, the average hourly pay for cyber risk management in Virginia is $30.08, according to ZipRecruiter salary data. Most workers in this role earn between $19.33 and $38.37 per hour, depending on experience, location, and employer.

What is cyber risk management?

A Cyber Risk Management job involves identifying, assessing, and mitigating cybersecurity risks that could impact an organization. Professionals in this field develop risk management frameworks, implement security controls, and ensure compliance with industry regulations. They work closely with IT and business teams to minimize cyber threats, such as data breaches and ransomware attacks. Their goal is to protect sensitive information and maintain business continuity.

What are the key skills and qualifications needed to thrive in cyber risk management, and why are they important?

To thrive in Cyber Risk Management, you need a strong understanding of information security principles, risk assessment methodologies, and regulatory compliance, often supported by a degree in cybersecurity, information technology, or a related field. Familiarity with tools such as risk management software, vulnerability assessment platforms, and certifications like CISSP, CISM, or CRISC is highly valued. Excellent analytical thinking, communication, and problem-solving skills help professionals effectively advise stakeholders and coordinate incident response efforts. These skills are crucial for identifying, evaluating, and mitigating cyber risks to safeguard organizational assets and ensure business continuity.

How much does a cyber risk manager make?

A cyber risk manager's salary typically ranges from $90,000 to $150,000 annually, depending on experience, certifications, and industry. Senior roles or those in high-demand sectors can earn higher compensation, often exceeding $160,000. Skills in risk assessment, cybersecurity frameworks, and relevant certifications like CISSP or CISM can influence salary levels.

What are some common challenges faced in a cyber risk management role, and how are they typically addressed?

Professionals in Cyber Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, ensuring compliance with complex regulations, and balancing security needs with business objectives. Addressing these issues requires continuous learning, leveraging up-to-date threat intelligence, and collaborating closely with IT, legal, and management teams to develop effective risk mitigation strategies. Many organizations encourage ongoing training and participation in industry events to stay current, while fostering a culture of open communication to quickly identify and address vulnerabilities. Embracing a proactive and adaptable approach ensures that cyber risks are managed effectively while supporting the organization’s goals.

What does a cyber risk management do?

A cyber risk management professional identifies, assesses, and mitigates cybersecurity threats to protect an organization’s information systems. They develop security policies, implement controls, and monitor for vulnerabilities, often using tools like risk assessment frameworks and security audits. Certifications such as CISSP or CISM are common in this field.

What are popular job titles related to Cyber Risk Management jobs in Virginia?

For Cyber Risk Management jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Cyber Risk Management jobs in Virginia look for?

The top searched job categories for Cyber Risk Management jobs in Virginia are:

What cities in Virginia are hiring for Cyber Risk Management jobs?

Cities in Virginia with the most Cyber Risk Management job openings:

Cyber Risk Management jobs near you
Infographic showing various Cyber Risk Management job openings in Virginia as of August 2026, with employment types broken down into 1% As Needed, 84% Full Time, 13% Part Time, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $62,558 per year, or $30.1 per hour.

Cyber Risk Management Specialist

Steampunk

Mclean, VA • On-site

Other

Posted 11 days ago

Job description

Overview
The Cyber Risk Management Specialist (CRMS) will specialize in in-depth knowledge of the program's cyber security hygiene, DevSecOps, Risk Management Framework (RMF), Assessment and Authorization (A&A), Federal Risk and Authorization Management Program (FedRAMP) compliance, continuous ATO (cATO) and continuous monitoring. A solid grasp on confidentiality, integrity, and availability (CIA) security concepts is required. The candidate will be responsible for the technical implementation and enforcement of security hardening, vulnerability management, scan analysis, data analysis for metrics reporting, cloud environments, compliance with Federal regulation and policy, and commercial best practices relating to cyber security. The candidate must have the ability to be flexible and adaptive to a fast-paced, fluid business environment.
Contributions
The role requires strong procedural knowledge of NIST SP 800-37 Risk Management Framework (RMF) for Information Systems and Organization, NIST SP 800-53 Security and Privacy Controls for Information Systems and Organizations, NIST SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations, FedRAMP requirements, cloud environments, cloud cybersecurity architecture, compliance with Federal regulation and policy, and commercial best practices relating to cloud security. The CRMS is expected to efficiently learn and adapt to rapidly changing federal governance frameworks and standards of practice, to include risk treatments for modern and emerging technologies (e,g, AI, blockchain, microservices).
The Cyber Risk Management Specialist performs a range of functions before, during, and after an authorization is granted:
  • Integrate security into DevOps effectively at every stage of the software development life cycle (SDLC).
  • Identify security holes and potential breaches, work through multifaceted security issues, and create effective solutions based on understanding of risk posture and treatments.
  • Develop and implement tactical strategies for seamless automation to optimize the IT infrastructure.
  • Apply specialized knowledge of financial audit standards, classified system IA requirements, and Privacy Act requirements.
  • Implement the NIST Special Publication (SP) 800 family of publications, particularly those associated with the Risk Management Framework.
  • Evaluating system, network, or infrastructure security controls against requirements such as FISMA, FIPS, and NIST guidelines
  • Apply in-depth, hands-on knowledge of the FedRAMP regulations, process, and requirements to lead project and initiative teams in accrediting cloud products and services.
  • Support external audits, data calls, and the Authorization to Operate (ATO) process by coordinating with organization system owners, engineers, CSP's and Third-Party Assessment Organizations (3PAO).
  • Positively impact the organization's goals and operational mission through various forms of metric performance measuring tools used to evaluate adherences to compliance.
  • Advise clients on FedRAMP requirements and provide security guidance on the implementation of security compliance controls per technical, management, and operational requirements.
  • Implement, monitor, and assess NIST SP 800-53 security controls for cloud environments to ensure compliance with FedRAMP requirements and governance models.
  • Ensure ongoing compliance with FedRAMP policy and requirements through monthly deliverables, regular vulnerability scanning, penetration testing, contingency testing, and annual security assessments performed by a 3PAO.
  • Support ATO, cATO, and continuous monitoring activities to include security documentation, audit log, security incidents, and risk assessment.
  • Review and manage Plan of Action & Milestones (POA&M), to include remediation tracking and reporting.

Qualifications
Required
  • Ability to obtain a U.S. government Security Clearance
  • Master's Degree and 6 year of cyber and FISMA experience; OR
    • Bachelor's Degree and 8 years of cyber and FISMA experience; OR
    • No degree and 12 years of experience, 10 of which must be in cyber and FISMA
  • Possesses at least one professional certification: CISSP, CASP, CISA, CISM or GSLC

Preferred
  • Experience in FISMA, cloud cybersecurity architecture, compliance with Federal regulation and policy, and commercial best practices relating to cloud security.
  • Experience in Information Security processes to include RMF, FedRAMP, Compliance, Continuous Monitoring, and Annual Assessments.
  • Certifications in one or more of the following: CISSP, CRICS, CCSP, CAP/CGRC.
  • Certifications in one or more of the following: AWS Certified Solutions Architect, AWS Certified Security, Microsoft Certified Solutions Architect, MCSE Cloud Platform and Infrastructure
  • Experience conducting assessments in a 3PAO, C3PAO, or risk auditing organization is desirable, but not required.
  • Experience supporting systems in Agile environments.

About steampunk
Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $100,000 to $150,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk's total compensation package for employees. Learn more about additional Steampunk benefits here.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers - and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.

Apply