ZipRecruiter

Log In

1

Cyber Risk Management Jobs in Virginia (NOW HIRING)

Beyond SOF

Cyber Risk Analyst (TS/SCI)

Reston, VA · On-site

Cyber Risk Analyst (TS/SCI) Reston, VA, USA Full-time Clearance: Top Secret/SCI Summary: Warnings ... Knowledge of Risk Management Framework (RMF) and the A&A activities needed to obtain and maintain ...

Cognowiz

Risk Manager

Richmond, VA · On-site

We are seeking an experienced Risk Management Professional to support the identification, assessment, monitoring, and mitigation of enterprise risks with a primary focus on data risk and cyber risk.

next page

Showing results 1-20

All JobsCyber Risk Management JobsCyber Risk Management Jobs in Virginia

Cyber Risk Management information

See Virginia salary details

$14

$30

$73

How much do cyber risk management jobs pay per hour?

As of Jul 4, 2026, the average hourly pay for cyber risk management in Virginia is $30.08, according to ZipRecruiter salary data. Most workers in this role earn between $19.33 and $38.37 per hour, depending on experience, location, and employer.

What is a Cyber Risk Management job?

A Cyber Risk Management job involves identifying, assessing, and mitigating cybersecurity risks that could impact an organization. Professionals in this field develop risk management frameworks, implement security controls, and ensure compliance with industry regulations. They work closely with IT and business teams to minimize cyber threats, such as data breaches and ransomware attacks. Their goal is to protect sensitive information and maintain business continuity.

Is SOC an entry level job?

A Security Operations Center (SOC) analyst role can be entry-level, especially for positions focused on monitoring security alerts and basic incident response. However, more advanced SOC roles typically require prior experience, certifications like CompTIA Security+ or CISSP, and knowledge of security tools such as SIEM systems. Entry-level positions often serve as a starting point for careers in cybersecurity and risk management.

What are the key skills and qualifications needed to thrive in the Cyber Risk Management position, and why are they important?

To thrive in Cyber Risk Management, you need a strong understanding of information security principles, risk assessment methodologies, and regulatory compliance, often supported by a degree in cybersecurity, information technology, or a related field. Familiarity with tools such as risk management software, vulnerability assessment platforms, and certifications like CISSP, CISM, or CRISC is highly valued. Excellent analytical thinking, communication, and problem-solving skills help professionals effectively advise stakeholders and coordinate incident response efforts. These skills are crucial for identifying, evaluating, and mitigating cyber risks to safeguard organizational assets and ensure business continuity.

Can you make $500,000 a year in cyber security?

Cyber Risk Management professionals can potentially earn $500,000 or more annually, especially at senior levels or in executive roles such as Chief Information Security Officer (CISO). Achieving this salary typically requires extensive experience, advanced certifications like CISSP or CISM, and leadership responsibilities in large organizations or high-demand industries. Salary varies based on location, company size, and individual expertise.

Can you make $200,000 in cyber security?

Cyber Risk Management professionals can potentially earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and working in high-demand industries or senior roles. Salary varies based on location, company size, and individual expertise, with senior positions often offering higher compensation.

What are some common challenges faced in a Cyber Risk Management role, and how are they typically addressed?

Professionals in Cyber Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, ensuring compliance with complex regulations, and balancing security needs with business objectives. Addressing these issues requires continuous learning, leveraging up-to-date threat intelligence, and collaborating closely with IT, legal, and management teams to develop effective risk mitigation strategies. Many organizations encourage ongoing training and participation in industry events to stay current, while fostering a culture of open communication to quickly identify and address vulnerabilities. Embracing a proactive and adaptable approach ensures that cyber risks are managed effectively while supporting the organization’s goals.

What does a cyber risk manager do?

A cyber risk manager assesses and mitigates cybersecurity threats to an organization by identifying vulnerabilities, developing risk management strategies, and implementing security controls. They often use tools like risk assessment frameworks and require knowledge of cybersecurity principles, compliance standards, and risk analysis techniques. Their role helps protect sensitive data and ensure business continuity.
What are popular job titles related to Cyber Risk Management jobs in Virginia? For Cyber Risk Management jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Cyber Risk Management jobs in Virginia look for? The top searched job categories for Cyber Risk Management jobs in Virginia are:
What cities in Virginia are hiring for Cyber Risk Management jobs? Cities in Virginia with the most Cyber Risk Management job openings:
Cyber Risk Management jobs near you
Cyber Risk Analyst (TS/SCI)

Cyber Risk Analyst (TS/SCI)

Beyond SOF

Reston, VA • On-site

Full-time

This job post has expired today. Applications are no longer accepted.

Job description

Cyber Risk Analyst (TS/SCI)
Reston, VA, USA
Full-time
Clearance: Top Secret/SCI
Job Description Summary:
Warnings about cyber threats are everywhere and the constantly evolving nature of these threats can make understanding them seem overwhelming to the DoD and the IC. In all of this "cyber noise," how can these organizations understand their risks and how to mitigate them? The answer is you. Build your knowledge as an information security risk specialist who knows how to break down complex threats into manageable plans of action.
As a Cyber-Risk Analyst on our team, you'll use your experience to work with DoD programs to discover their cyber risks, understand policies, and develop a mitigation plan. You'll get technical, environmental, and personnel details from engineers and SMEs to assess the entire threat landscape. Then, you'll help your team guide your client through a plan of action with presentations, white papers, and milestones. You'll work on translating security concepts for your client so they can make the best decisions to secure their mission critical networks and systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity, security and network tools, systems engineering, and data science.
Qualifications
  • 5+ years of experience working in a professional IT environment
  • 3+ years of experience with cybersecurity
  • 3+ years of experience with Assessment and Authorization (A&A) in support of DoD and IC programs, including package development, artifact generation, and authority to operate (ATO)
  • Experience with security hardening of Windows and Linux operating systems and security tools, such as ACAS, SCAP, STIG/SRGs, SCC, eMASS/Xacta, ESS, Prisma Cloud, Kubernetes, Rancher, and Docker
  • Experience generating and maintaining System Security Plans (SSP), Implementation Plans, Privacy Impact Assessments, Security Assessment Plans (SAP), Risk Assessments, Plan of Action and Milestones (POA&M), and other A&A documentation
  • Knowledge of Risk Management Framework (RMF) and the A&A activities needed to obtain and maintain an ATO, including National Institute of Standards and Technology (NIST) and Committee on National Security Systems Instruction (CNSSI), including NIST SP 800-60, NIST SP 800-53, and CNSSI 1253
  • IAT Level II Certification, including a Security+ Certification

Desired Qualifications:
  • Experience with DoD or IC cybersecurity projects or programs
  • Experience with DevSecOps, Path-to-Production, and CI/CD
  • Experience with Cloud Authorization and Cloud Migration
  • Experience with administering Red Hat Enterprise Linux or Windows Server 2012 or higher
  • Ability to provide subject matter expertise to system engineering documents, including technical requirements documents, interface control documents, and system specifications
  • Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders
  • Ability to communicate and integrate between multiple customer stakeholders
  • Bachelor's degree

Apply