ZipRecruiter

Log In

1

Cyber Security Risk Management Jobs in Washington

Ops Tech Alliance

Cybersecurity Risk Analyst

Mclean, VA

$100K - $150K/yr

Cybersecurity Risk Analyst Salary Range: $100,000 - $150,000 Clearance: TS/SCI + CI Poly Location ... Experience with RMF, ATO, NIST SP 800-53, continuous monitoring, vulnerability management, or SOC ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

... cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security ...

Customer Value Partners

Risk Manager

Rockville, MD

$155K - $165K/yr

... cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

... cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security ...

ThinkTek

Cybersecurity Engineer

Arlington, VA · On-site

$150K - $185K/yr

Lead RMF and Cybersecurity Risk Management Construct (CSRMC) activities, including system authorization, continuous monitoring, and maintenance of ATO/cATO packages. * Manage and maintain eMASS ...

previous pagenext page

Showing results 21-40

All JobsCyber Security Risk Management JobsCyber Security Risk Management Jobs in Washington

Cyber Security Risk Management information

See Washington salary details

$64.6K

$150.6K

$210.7K

How much do cyber security risk management jobs pay per year?

As of Sep 7, 2026, the average yearly pay for cyber security risk management in Washington is $150,592.00, according to ZipRecruiter salary data. Most workers in this role earn between $125,700.00 and $169,900.00 per year, depending on experience, location, and employer.

What is cyber security risk management?

Cyber security risk management is the process of identifying, assessing, and prioritizing risks to an organization's information systems and data. It involves evaluating potential threats and vulnerabilities, determining the likelihood and impact of these risks, and implementing measures to mitigate or manage them. Effective risk management helps organizations protect sensitive data, ensure regulatory compliance, and minimize the impact of cyber attacks. This process is ongoing and adapts to new threats and changes in technology.

What are the key skills and qualifications needed to thrive in cyber security risk management?

To thrive in Cyber Security Risk Management, you need a solid understanding of risk assessment methodologies, information security frameworks (such as ISO 27001 or NIST), and often a relevant degree or certification like CISSP or CISM. Familiarity with security tools, vulnerability assessment platforms, and risk management software is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying threats and conveying risk to stakeholders. These skills ensure that organizations can proactively manage and mitigate cyber threats, safeguarding critical assets and maintaining compliance.

What are some typical challenges faced in cyber security risk management, and how can they be addressed?

Professionals in Cyber Security Risk Management often encounter challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and ensuring compliance with various regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and the implementation of robust risk assessment frameworks. Collaboration with IT, legal, and business teams is essential to develop practical security policies that protect assets without hindering operations.

What is the difference between Cyber Security Risk Management vs Cyber Security Analyst?

AspectCyber Security Risk ManagementCyber Security Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, CISSP (preferred)
Work EnvironmentPolicy development, risk assessment, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageOrganizations focusing on risk mitigation and complianceOrganizations implementing and maintaining security measures

Cyber Security Risk Management professionals focus on identifying, assessing, and mitigating security risks at an organizational level, often involved in policy and strategy. Cyber Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require similar certifications and work within the same industry, their core responsibilities differ: risk managers develop strategies, whereas analysts execute security measures and respond to threats.

What does a cyber security risk management do?

A cyber security risk management professional identifies, assesses, and prioritizes potential security threats to an organization’s information systems. They develop strategies and implement controls to mitigate risks, often using frameworks like NIST or ISO, and may conduct regular audits to ensure security measures are effective.

What are popular job titles related to Cyber Security Risk Management jobs in Washington?

For Cyber Security Risk Management jobs in Washington, the most frequently searched job titles are:

What job categories do people searching Cyber Security Risk Management jobs in Washington look for?

The top searched job categories for Cyber Security Risk Management jobs in Washington are:

What cities in Washington are hiring for Cyber Security Risk Management jobs?

Cities in Washington with the most Cyber Security Risk Management job openings:

Cyber Security Risk Management jobs near you
Infographic showing various Cyber Security Risk Management job openings in Washington as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 13% Part Time, and 3% Contract. Highlights an 83% Physical, 2% Hybrid, and 15% Remote job distribution, with an average salary of $150,592 per year, or $72.4 per hour.

Senior Security Risk Management SME with Security Clearance

Def-Logix, Inc.

Washington, DC • On-site

Other

Re-posted 17 days ago

Job description

Location: Washington, DC (On-site) We are seeking an experienced Senior Security Risk Management Subject Matter Expert (SME) to provide technical expertise in security risk management, Assessment and Authorization (A&A), Federal cybersecurity compliance, and continuous monitoring. The successful candidate will support cybersecurity risk management activities across secure cloud, hybrid, and cross-domain environments while ensuring compliance with applicable Federal and Intelligence Community (IC) cybersecurity requirements. The ideal candidate will possess extensive experience applying risk management principles, implementing security controls, and supporting evolving cybersecurity practices, including the automation of Assessment and Authorization (A&A) and continuous monitoring activities. Key Responsibilities
Provide subject matter expertise in security risk management and cybersecurity compliance activities.
Support Assessment and Authorization (A&A) efforts in accordance with Federal cybersecurity requirements.
Ensure compliance with the Federal Information Security Modernization Act (FISMA) and applicable Intelligence Community (IC) cybersecurity policies and standards.
Support continuous monitoring activities across enterprise environments.
Provide expertise in Cross Domain Solutions (CDS) security requirements.
Support secure cloud and hybrid engineering initiatives from a security risk management perspective.
Apply NIST Special Publication (SP) 800 Series guidance, CNSSI 1253 security controls, and Risk Management Framework (RMF) principles.
Support emerging cybersecurity risk management practices, including automation of A&A and continuous monitoring activities.
Collaborate with Government stakeholders to develop and implement effective security risk management strategies. Minimum Qualifications
Minimum 10 years of related cybersecurity and security risk management experience.
At least 2 years of recent experience in each of the following:
Assessment and Authorization (A&A)
Federal Information Security Modernization Act (FISMA) compliance
Intelligence Community (IC) cybersecurity policy and standards
Continuous monitoring
Cross Domain Solutions (CDS)
Secure cloud and hybrid engineering
Demonstrated experience with emerging security risk management practices, including automation of A&A and continuous monitoring.
Experience applying NIST SP 800 Series guidance, CNSSI 1253 security controls, and Risk Management Framework (RMF) principles. One of the following certifications, in good standing, or comparable demonstrable experience:
Certified Information Security Manager (CISM)
Certified Authorization Professional (CAP)
Governance, Risk, and Compliance (GRC) certification Preferred Qualifications
Certifications in one or more cloud platforms, including:
Amazon Web Services (AWS)
Microsoft Azure
Microsoft Office 365
Current or prior experience supporting the U.S. Department of Homeland Security (DHS).
Demonstrated experience working within DHS organizations or supporting DHS cybersecurity risk management initiatives is highly preferred.

Apply