ZipRecruiter

Log In

1

Cyber Security Risk Management Jobs in Maryland (NOW HIRING)

ERP International

Cybersecurity Program Manager

Laurel, MD · Remote

$180K - $230K/yr

The ideal candidate combines strong program management capabilities with a working knowledge of cybersecurity, risk management, governance, compliance, and modernization initiatives. Be the Best! ERP ...

ERP International

Cybersecurity Program Manager

Laurel, MD · Remote

$180K - $230K/yr

The ideal candidate combines strong program management capabilities with a working knowledge of cybersecurity, risk management, governance, compliance, and modernization initiatives. Be the Best! ERP ...

Erp International

Cybersecurity Program Manager

Laurel, MD · On-site

$180K - $230K/yr

The ideal candidate combines strong program management capabilities with a working knowledge of cybersecurity, risk management, governance, compliance, and modernization initiatives. Be the Best! ERP ...

ManTech

Cyber Security Task Lead

Linthicum Heights, MD · On-site

$128K - $214K/yr

You will facilitate Government and Contractor communications, maintain compliance frameworks, oversee cybersecurity risk management, and drive strategic IT and security initiatives across project ...

VMD Corp

Senior Cybersecurity Specialist

Annapolis, MD · On-site

Perform risk assessments based on Federal guidelines and industry best practices * Assist teams in ... Is comfortable managing multiple priorities, deadlines, assessments, and documentation efforts ...

Tower

Risk Management Coordinator

Laurel, MD · On-site

The Risk Management Coordinator evaluates operational, third-party, and enterprise risks; analyzes ... Analyzes trends in vendor performance, cybersecurity ratings, financial condition, audit results ...

previous pagenext page

Showing results 21-40

All JobsCyber Security Risk Management JobsCyber Security Risk Management Jobs in Maryland

Cyber Security Risk Management information

See Maryland salary details

$55.3K

$129K

$180.5K

How much do cyber security risk management jobs pay per year?

As of Sep 3, 2026, the average yearly pay for cyber security risk management in Maryland is $129,045.00, according to ZipRecruiter salary data. Most workers in this role earn between $107,700.00 and $145,600.00 per year, depending on experience, location, and employer.

What is cyber security risk management?

Cyber security risk management is the process of identifying, assessing, and prioritizing risks to an organization's information systems and data. It involves evaluating potential threats and vulnerabilities, determining the likelihood and impact of these risks, and implementing measures to mitigate or manage them. Effective risk management helps organizations protect sensitive data, ensure regulatory compliance, and minimize the impact of cyber attacks. This process is ongoing and adapts to new threats and changes in technology.

What are the key skills and qualifications needed to thrive in cyber security risk management?

To thrive in Cyber Security Risk Management, you need a solid understanding of risk assessment methodologies, information security frameworks (such as ISO 27001 or NIST), and often a relevant degree or certification like CISSP or CISM. Familiarity with security tools, vulnerability assessment platforms, and risk management software is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying threats and conveying risk to stakeholders. These skills ensure that organizations can proactively manage and mitigate cyber threats, safeguarding critical assets and maintaining compliance.

What are some typical challenges faced in cyber security risk management, and how can they be addressed?

Professionals in Cyber Security Risk Management often encounter challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and ensuring compliance with various regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and the implementation of robust risk assessment frameworks. Collaboration with IT, legal, and business teams is essential to develop practical security policies that protect assets without hindering operations.

What is the difference between Cyber Security Risk Management vs Cyber Security Analyst?

AspectCyber Security Risk ManagementCyber Security Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, CISSP (preferred)
Work EnvironmentPolicy development, risk assessment, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageOrganizations focusing on risk mitigation and complianceOrganizations implementing and maintaining security measures

Cyber Security Risk Management professionals focus on identifying, assessing, and mitigating security risks at an organizational level, often involved in policy and strategy. Cyber Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require similar certifications and work within the same industry, their core responsibilities differ: risk managers develop strategies, whereas analysts execute security measures and respond to threats.

What does a cyber security risk management do?

A cyber security risk management professional identifies, assesses, and prioritizes potential security threats to an organization’s information systems. They develop strategies and implement controls to mitigate risks, often using frameworks like NIST or ISO, and may conduct regular audits to ensure security measures are effective.

What are popular job titles related to Cyber Security Risk Management jobs in Maryland?

For Cyber Security Risk Management jobs in Maryland, the most frequently searched job titles are:

What job categories do people searching Cyber Security Risk Management jobs in Maryland look for?

The top searched job categories for Cyber Security Risk Management jobs in Maryland are:

Cyber Security Risk Management jobs near you
Infographic showing various Cyber Security Risk Management job openings in Maryland as of August 2026, with employment types broken down into 1% As Needed, 85% Full Time, 12% Part Time, and 2% Contract. Highlights an 82% Physical, 3% Hybrid, and 15% Remote job distribution, with an average salary of $129,045 per year, or $62 per hour.

Lead, Governance, Risk & Compliance (Remote)

Emergent Biosolutions

Gaithersburg, MD • Remote

$171K/yr

Full-time

Posted 20 days ago

Job description


 Preparedness today, safer tomorrow.

 Emergent is a leading public health company that delivers protective and life-saving solutions to
 communities around the world.  Here, you will join passionate professionals where our culture is informed
 by our values and commitment to protecting and saving lives.

I.    JOB SUMMARY 

The Lead for Governance, Risk and Compliance will oversee cybersecurity governance, risk management and compliance processes including the data protection and security awareness training programs.  This position is an individual contributor role, reporting to the IT Vice President and CISO at Emergent. 

This role will initially focus on maturing enterprise-wide data protection capabilities, including data classification, data loss prevention, information protection and data governance frameworks. Over time, the role will expand to support Manufacturing OT security and oversee broader GRC functions, including cybersecurity risk management, regulatory compliance, security policies and standards and security governance.

The ideal candidate combines strong cybersecurity expertise with program leadership,  executive communications and experience implementing security programs leveraging governance and technologies. This position will be hands-on and require strong collaboration with various IT and business functions to satisfy our governance, risk management and compliance processes. 

This position is full-time remote.

II.    ESSENTIAL FUNCTIONS


Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions.

Data Protection 

  • Lead implementation and governance of technologies supporting: Data Classification and Labeling, Data Loss Prevention (DLP), Insider Risk Management, Data Discovery and Inventory, Records and 

Information Management

  • Partner with business stakeholders to identify, classify, and protect information
  • Establish governance processes for data owners, custodians, and users
  • Define data protection metrics, KPIs, and reporting for executive leadership
  • Lead remediation efforts for large volumes of inadequately protected data
  • Oversee data protection policy compliance across all technology platforms
  • Drive adoption of data protection capabilities via training and change management

Governance

  • Lead the organization on improved maturity with regards to IS27001, CMMC or related industry certifications based on the NIST framework.
  • Lead cybersecurity maturity assessments and create/maintain cybersecurity KPI and metrics for efficient decision making with functional leaders  
  • Establish and maintain cybersecurity governance frameworks and operating models.
  • Support various cyber councils, governance forums and program steering committees
  • Collaborate with IT and functional leaders to align cybersecurity initiatives with business objectives

Risk Management

  • Create and maintain the Cybersecurity risk register and support risk quantification and prioritization efforts that are appropriate for the environment
  • Partner with business leaders to evaluate technology, operational, third-party, data-related risks and document risk assessments and their approvals
  • Support risk reporting dashboards for executive management and governance councils
  •  Assist the vulnerability management program to document risks and plans of actions.

Policies & Communications 

  • Lead, own and develop new information security policies and review existing policies for updates and approvals
  • Lead, maintain and continuously improve security awareness and training programs, cybersecurity company-wide campaign, and
  • Lead cybersecurity audits internally and develop readiness activities. Support internal and external audits and assessments.

Manufacturing Security

  • Support the manufacturing security program workstreams around network segmentation, secure remote access, logging and OT incident management.  
  • Create and lead the cyber training and awareness for manufacturing sites
  • Support the execution of periodic BCP and Cybersecurity table top exercises  
    The above statements are intended to describe the nature of work performed by those in this job and are not an exhaustive list of all duties. Nothing in this job description restricts managements right to assign or reassign duties and responsibilities to this job at any time which reflects management's assignment of essential functions. 


III. MINIMUM EDUCATION, EXPERIENCE, SKILLS
Education: 

  • Bachelor's Degree in Business or Information Systems, or equivalent experience.

Experience: 

  • 5+ years in cybersecurity, compliance, risk management or 7+ years of related/industry experience 
  • Experience leading cybersecurity projects and programs
  • Experience working with cybersecurity tools, methodologies and technologies

Knowledge: 

  • Experience supporting cybersecurity programs within manufacturing environments, including familiarity with cybersecurity risks associated with industrial operation
  • Must understand network and computing, vulnerability management, IAM/PAM
  • Must be familiar with Sarbanes Oxley (SOX), SSAE 18 SOC reports, NIST CSF, ISO27001 and CMMC  

Skills: 

  • Strong interpersonal and collaboration skills to work well with all IT and business stakeholders
  • Strong communication skills (oral, written, presentation) to influence across all levels of the organization  
  • Adequate program management and organizational skills to ensure accuracy and timeliness of job duties
  • Must be able to author policy documents, provide business risk assessments, and communicate well with other teams.
  • Must be able to identify sensitive information, such as PII, PHI, Clinical Data, etc.

Abilities: 

  • Demonstrated experience working across organizations to resolve conflicts
  • Demonstrated experience with organization-wide communications.
  • Demonstrated experience managing and documenting security risks.

U.S. Base Pay Ranges and Benefits Information

The estimated annual base salary as a new hire for this position ranges from [$155,500 to $188,200]. Individual base pay depends on various factors such as applicant's education, experience, skills, and abilities, as well as internal equity and alignment with market data.  The salary may also be adjusted based on applicant's geographic location.  Certain roles are eligible for additional incentive compensation, including merit increases, annual bonus, [and/or long-term incentives in the form of stock options.]

Additionally, Emergent offers a comprehensive benefits package*.  Information regarding additional benefits can be found here:  https://www.emergentbiosolutions.com/careers/life-at-emergent

(*Eligibility for benefits is governed by the applicable plan documents and policies).

If you are selected for an interview, please feel welcome to speak to a Human Resources Partner about our compensation philosophy and available benefits.

There are physical/mental demands and work environment characteristics that must be met by an individual to successfully perform the essential functions of the job. This information is available upon request from the candidate.

Reasonable accommodations may be made to enable individuals with disabilities to perform all essential functions.

Emergent BioSolutions is an Equal Opportunity/Affirmative Action Employer and values the diversity of our workforce.  Emergent does not discriminate on the basis of race, color, creed, religion, sex or gender (including pregnancy, childbirth, and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, age, national origin, ancestry, citizenship status, marital status, physical or mental disability, military service or veteran status, genetic information or any other characteristics protected by applicable federal, state or local law.

Information submitted will be used by Emergent BioSolutions for activities related to your prospective employment. Emergent BioSolutions respects your privacy and any use of the information submitted will be subject to the terms of our Privacy Policy .

Emergent BioSolutions does not accept non-solicited resumes or candidate submittals from search/recruiting agencies not already on Emergent BioSolutions' approved agency list. Unsolicited resumes or candidate information submitted to Emergent BioSolutions by search/recruiting agencies not already on Emergent BioSolutions' approved agency list shall become the property of Emergent BioSolutions and if the candidate is subsequently hired by Emergent BioSolutions, Emergent BioSolutions shall not owe any fee to the submitting agency.

Apply