ZipRecruiter

Log In

1

Cyber Risk Manager Jobs in Maryland (NOW HIRING)

Brown Advisory

Cyber GRC Specialist

Baltimore, MD · On-site

Brown Advisory is currently seeking a Cyber GRC Specialist to support and mature the firm's governance, risk, compliance, and control-management routines. This blended role is designed for someone ...

Deloitte

Cyber - Cloud Architect - Manager

Baltimore, MD

$64.50 - $82.25/hr

Join Deloitte's Cloud Cyber Risk practice and help organizations secure cloud transformation at scale. As a Cloud Architect, Manager, you will support clients with cloud security strategy ...

Deloitte

Cyber ServiceNow - Consultant

Baltimore, MD · Remote

Through solutions and managed services that simplify complexity, we help clients operate with resilience, grow with confidence, and proactively manage cyber, risk, and technology programs. Recruiting ...

Morgan Stanley

VP, CTIS Risk Oversight Lead

Baltimore, MD · On-site

$95K - $170K/yr

... management, cyber threat intelligence, network security, IAM, change management, and other related areas. The ideal candidate will bring operational knowledge and experience paired with a strong risk ...

Morgan Stanley

VP, CTIS Risk Oversight Lead

Baltimore, MD · On-site

$95K - $170K/yr

... management, cyber threat intelligence, network security, IAM, change management, and other related areas. The ideal candidate will bring operational knowledge and experience paired with a strong risk ...

Morgan Stanley

VP, CTIS Risk Oversight Lead

Baltimore, MD

$95K - $170K/yr

... management, cyber threat intelligence, network security, IAM, change management, and other related areas. The ideal candidate will bring operational knowledge and experience paired with a strong risk ...

Morgan-Stanley

VP, CTIS Risk Oversight Lead

Baltimore, MD · On-site

$95K - $170K/yr

... management, cyber threat intelligence, network security, IAM, change management, and other related areas. The ideal candidate will bring operational knowledge and experience paired with a strong risk ...

Deloitte

Senior Manager - ServiceNow

Baltimore, MD · On-site

Through powerful solutions and managed services that simplify complexity, we enable our clients to ... Oversee the delivery of ServiceNow-based cyber risk solutions, ensuring alignment with best ...

Deloitte

Cyber Data Protection Manager

Baltimore, MD · On-site

$110K - $149K/yr

If so, consider joining Deloitte & Touche LLP's growing Cyber Risk Digital Trust & Privacy practice ... Manage and lead the proposal development process * Contribute to Deloitte's thought leadership in ...

next page

Showing results 1-20

All JobsCyber Risk JobsCyber Risk Manager JobsCyber Risk Manager Jobs in Maryland

Cyber Risk Manager information

See Maryland salary details

$50K

$108.3K

$165K

How much do cyber risk manager jobs pay per year?

As of Sep 13, 2026, the average yearly pay for cyber risk manager in Maryland is $108,270.00, according to ZipRecruiter salary data. Most workers in this role earn between $87,300.00 and $125,200.00 per year, depending on experience, location, and employer.

How does a cyber risk manager collaborate with other departments to strengthen an organization's cybersecurity posture?

A Cyber Risk Manager frequently works with IT, legal, compliance, and business units to identify, assess, and mitigate cyber risks across the organization. This collaboration involves leading risk assessments, facilitating security awareness training, and ensuring that cybersecurity policies align with business objectives. Regular cross-department meetings and incident response simulations are common, fostering a shared responsibility for cyber resilience. Effective communication and relationship-building skills are essential in this role to bridge technical and non-technical teams.

What are the key skills and qualifications needed to thrive as a cyber risk manager, and why are they important?

To thrive as a Cyber Risk Manager, you need a solid background in information security, risk assessment, and compliance, often supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), GRC tools, and relevant certifications like CISSP or CISM is typically required. Excellent analytical thinking, communication, and leadership skills set top performers apart in this role. These skills are crucial for identifying risks, implementing effective controls, and ensuring the organization’s digital assets remain secure and compliant.

What is the difference between Cyber Risk Manager vs Cybersecurity Analyst?

AspectCyber Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability testing
Employer & Industry UsageFinancial, healthcare, large enterprisesIT departments, security firms, corporate environments

The Cyber Risk Manager focuses on identifying, assessing, and mitigating organizational cyber risks through strategic planning and policy development. In contrast, the Cybersecurity Analyst primarily monitors security systems, responds to incidents, and tests vulnerabilities. Both roles require certifications like CISSP, but their daily tasks and focus areas differ significantly, with the manager taking a broader, strategic approach and the analyst handling operational security tasks.

How much does a cyber risk manager make?

A cyber risk manager's salary typically ranges from $90,000 to $150,000 annually, depending on experience, certifications, and industry. Senior roles or those in high-demand sectors can earn higher compensation, often supplemented with bonuses and benefits.

What does a cyber risk manager do?

A cyber risk manager assesses and mitigates cybersecurity threats to an organization’s information systems. They identify vulnerabilities, develop risk management strategies, and implement security controls, often using tools like risk assessment frameworks and security software. Certification such as CISSP or CISM can enhance their effectiveness in managing cyber risks.

What are popular job titles related to Cyber Risk Manager jobs in Maryland?

For Cyber Risk Manager jobs in Maryland, the most frequently searched job titles are:

What job categories do people searching Cyber Risk Manager jobs in Maryland look for?

The top searched job categories for Cyber Risk Manager jobs in Maryland are:

What cities in Maryland are hiring for Cyber Risk Manager jobs?

Cities in Maryland with the most Cyber Risk Manager job openings:

Cyber Risk Manager jobs near you
Infographic showing various Cyber Risk Manager job openings in Maryland as of August 2026, with employment types broken down into 86% Full Time, 13% Part Time, and 1% Contract. Highlights an 81% Physical, 2% Hybrid, and 17% Remote job distribution, with an average salary of $108,270 per year, or $52.1 per hour.

Cyber GRC Specialist

Baltimore, MD • On-site

Brown Advisory Incorporated
Finance and Insurance • 201 - 500 employees
Learn more about Brown Advisory Incorporatedexternal

Full-time

Medical, Dental, Vision, Life, Retirement

Re-posted 5 days ago

Job description

Company Overview
Every firm has a culture - the values, beliefs, methodology, attitudes and standards that reflect an organization's DNA. But the truly inspiring firms - the game-changers, the industry leaders and the disruptors - have cultures that propel them to innovate and stand out. At Brown Advisory, we aim to be one of those inspired firms. Over the years, we have purposefully built and nurtured our client-first culture.
Brown Advisory is an independent investment management and strategic advisory firm committed to delivering a combination of first-class performance, strategic advice and the highest level of client service. The firm's clients-including individuals, families, family offices, endowments, foundations, charities, institutions, consultants, and financial intermediaries-are served by over 1,000 colleagues worldwide, all of whom are equity owners of the firm.
Brown Advisory is currently seeking a Cyber GRC Specialist to support and mature the firm's governance, risk, compliance, and control-management routines. This blended role is designed for someone who can translate security requirements into practical business processes, drive evidence and accountability, and communicate clearly with technical and non-technical stakeholders.
As part of a lean Information Security team within a mid-sized financial services organization, this individual will serve as a central coordinator for cyber risk, policy management, control testing, audit readiness, client and regulatory response support, and vulnerability remediation governance. The role is not intended to be a hands-on vulnerability engineering role; rather, it ensures the process, ownership, exceptions, reporting, and governance routines are working.
Blended Role Coverage
Primary emphasis: Cyber GRC support for policies, controls, cyber risk tracking, audit coordination, exceptions, and governance routines.
Blended coverage: Cyber Risk / Compliance Analyst work, ISO and risk-platform support, evidence coordination, client/regulatory response support, communications, and vulnerability governance.
Duties and Responsibilities
  • Support and mature core cyber governance routines, including policy management, control ownership, risk acceptance, exception handling, standards maintenance, and periodic leadership reporting.
  • Maintain the cyber risk register and partner with technology and business owners to document risk decisions, remediation plans, due dates, dependencies, and residual risk.
  • Serve as a key administrator and process contributor for ISO and security-risk management platforms such as Vanta or similar tools.
  • Coordinate evidence collection, control testing, audit requests, client due diligence responses, regulatory requests, and recurring compliance deliverables.
  • Translate ISO 27001, regulatory, client, and internal security expectations into practical controls and operating procedures appropriate for Brown Advisory's size and risk profile.
  • Facilitate cross-functional communications for security change, SaaS inventory, policy enforcement, control adoption, and risk remediation.
  • Coordinate vulnerability management governance, including scan-result intake, prioritization routines, remediation tracking, exception handling, and reporting.
  • Partner with security engineers, infrastructure teams, application owners, Compliance, Legal, Operations, and Client Service to close control gaps in a business-aligned manner.
  • Develop clear metrics for control effectiveness, audit readiness, exceptions, overdue remediation, and recurring governance activities.
  • Identify process improvements that make security governance more repeatable, transparent, and useful without creating unnecessary bureaucracy.

Preferred Qualifications
  • Bachelor's degree in cyber security, information systems, risk management, business, or a relevant field preferred; equivalent professional experience will be considered.
  • 3-6 years of experience in cyber GRC, information security, technology risk, IT audit, compliance, or related control-management work preferred.
  • Working knowledge of ISO 27001, SOC 2, NIST CSF, CIS Controls, SEC/FINRA expectations, privacy requirements, or comparable control frameworks.
  • Experience supporting audits, evidence collection, control testing, policy updates, issue tracking, or risk-register maintenance in a regulated environment; financial services experience preferred.
  • CISA, CRISC, CISM, Security+, ISO 27001 Foundation/Lead Implementer, or similar professional designation preferred but not required.

Technical Skills
  • Cyber risk registers, exception management, control testing, evidence management, policy lifecycle management, and audit coordination.
  • GRC or trust-management platforms such as Vanta, Archer, ServiceNow GRC, OneTrust, Drata, or similar tools.
  • Vulnerability management governance, including prioritization, remediation tracking, aging analysis, exception workflows, and executive reporting.
  • Strong knowledge of cyber security controls across identity, endpoint, cloud, network, data protection, application security, and third-party risk.
  • Excellent writing, facilitation, and stakeholder-management skills, including the ability to turn technical risk into clear business language.
  • Practical judgment about when to enforce, when to escalate, and when to help the business find a workable control path.
  • Demonstrates curiosity and a continuous improvement mindset by identifying opportunities to enhance processes, improve efficiency, and thoughtfully leverage new technologies and tools, including AI-enabled productivity solutions

Personal Attributes
  • Take ownership and move initiatives forward without constant oversight.
  • Balance technical depth, process discipline, and sound business judgment.
  • Approach risk management pragmatically rather than theoretically.
  • Thrive in collaborative, high-accountability environments.
  • Communicate clearly with technical and non-technical colleagues.
  • Bring an entrepreneurial mindset to building and improving security capabilities.

Applicants must be authorized to work in the United States without the need for current or future employer-sponsored work authorization (e.g., H-1B , O-1, F-1 (OPT), TN, or any other non-immigrant visa classifications that require employer support or sponsorship).
MD Salary: $95-$115k. Commensurate with experience and location. Does not include bonus or long term incentive eligibility (if applicable).
DC Salary: $104.5K-$126.5K. Commensurate with experience and location. Does not include bonus or long-term incentive eligibility (if applicable).
Benefits
At Brown Advisory we offer a competitive compensation package, including full benefits.
• Medical
• Dental
• Vision
• Wellness program participation incentive
• Financial wellness program
• Fitness event fee reimbursement
• Gym membership discounts
• Colleague Assistance Program
• Telemedicine Program (for those enrolled in Medical)
• Adoption Benefits
• Daycare late pick-up fee reimbursement
• Basic Life & Accidental Death & Dismemberment Insurance
• Voluntary Life & Accidental Death & Dismemberment Insurance
• Short Term Disability
• Paid parental leave
• Group Long Term Disability
• Pet Insurance
• 401(k) (50% employer match up to IRS limit, 4 year vesting)
Brown Advisory is an Equal Employment Opportunity Employer.

Apply