ZipRecruiter

Log In

1

Cyber Security Risk Management Jobs in Washington

ASSYST, Inc.

Cybersecurity Risk Advisor

Washington, DC · On-site

ASSYST is seeking a Cybersecurity Risk Advisor to support federal Cybersecurity program. The ... They will act as the subject matter expert in all areas of the Risk Management Framework (RMF) and ...

Ops Tech Alliance

Cybersecurity Risk Analyst

Mclean, VA

$100K - $150K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • PTO

Cybersecurity Risk Analyst Salary Range: $100,000 - $150,000 Clearance: TS/SCI + CI Poly Location ... Experience with RMF, ATO, NIST SP 800-53, continuous monitoring, vulnerability management, or SOC ...

Customer Value Partners

Risk Manager

Rockville, MD

$155K - $165K/yr

... cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

... cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security ...

Customer Value Partners

Risk Manager

Rockville, MD

... cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

... cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security ...

Johnson Service Group

Be Seen First

Senior Cybersecurity Risk Analyst (Remote)

Mclean, VA · On-site

$74.51 - $76.92/hr

  • Medical

  • Dental

  • Vision

  • Retirement

The Senior Cybersecurity Risk Analyst is a remote, senior individual contributor position within ... Demonstrated experience in enterprise risk management and in third-party or vendor cyber risk ...

New

ThinkTek

Cybersecurity Engineer

Arlington, VA · On-site

$150K - $185K/yr

  • Medical

  • Dental

  • Vision

  • PTO

Lead RMF and Cybersecurity Risk Management Construct (CSRMC) activities, including system authorization, continuous monitoring, and maintenance of ATO/cATO packages. * Manage and maintain eMASS ...

New

ThinkTek

Cybersecurity Engineer

Arlington, VA · On-site

$150K - $185K/yr

  • Medical

  • Dental

  • Vision

  • PTO

Lead RMF and Cybersecurity Risk Management Construct (CSRMC) activities, including system authorization, continuous monitoring, and maintenance of ATO/cATO packages. * Manage and maintain eMASS ...

New

previous pagenext page

Showing results 21-40

All JobsCyber Security Risk Management JobsCyber Security Risk Management Jobs in Washington

Cyber Security Risk Management information

See Washington salary details

$64.6K

$150.6K

$210.7K

How much do cyber security risk management jobs pay per year?

As of Aug 16, 2026, the average yearly pay for cyber security risk management in Washington is $150,592.00, according to ZipRecruiter salary data. Most workers in this role earn between $125,700.00 and $169,900.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive in cyber security risk management?

To thrive in Cyber Security Risk Management, you need a solid understanding of risk assessment methodologies, information security frameworks (such as ISO 27001 or NIST), and often a relevant degree or certification like CISSP or CISM. Familiarity with security tools, vulnerability assessment platforms, and risk management software is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying threats and conveying risk to stakeholders. These skills ensure that organizations can proactively manage and mitigate cyber threats, safeguarding critical assets and maintaining compliance.

What is cyber security risk management?

Cyber security risk management is the process of identifying, assessing, and prioritizing risks to an organization's information systems and data. It involves evaluating potential threats and vulnerabilities, determining the likelihood and impact of these risks, and implementing measures to mitigate or manage them. Effective risk management helps organizations protect sensitive data, ensure regulatory compliance, and minimize the impact of cyber attacks. This process is ongoing and adapts to new threats and changes in technology.

What is the difference between Cyber Security Risk Management vs Cyber Security Analyst?

AspectCyber Security Risk ManagementCyber Security Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, CISSP (preferred)
Work EnvironmentPolicy development, risk assessment, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageOrganizations focusing on risk mitigation and complianceOrganizations implementing and maintaining security measures

Cyber Security Risk Management professionals focus on identifying, assessing, and mitigating security risks at an organizational level, often involved in policy and strategy. Cyber Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require similar certifications and work within the same industry, their core responsibilities differ: risk managers develop strategies, whereas analysts execute security measures and respond to threats.

What are some typical challenges faced in cyber security risk management, and how can they be addressed?

Professionals in Cyber Security Risk Management often encounter challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and ensuring compliance with various regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and the implementation of robust risk assessment frameworks. Collaboration with IT, legal, and business teams is essential to develop practical security policies that protect assets without hindering operations.

What are popular job titles related to Cyber Security Risk Management jobs in Washington?

For Cyber Security Risk Management jobs in Washington, the most frequently searched job titles are:

What job categories do people searching Cyber Security Risk Management jobs in Washington look for?

The top searched job categories for Cyber Security Risk Management jobs in Washington are:

What cities in Washington are hiring for Cyber Security Risk Management jobs?

Cities in Washington with the most Cyber Security Risk Management job openings:

Cyber Security Risk Management jobs near you
Infographic showing various Cyber Security Risk Management job openings in Washington as of August 2026, with employment types broken down into 1% As Needed, 81% Full Time, 16% Part Time, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $150,592 per year, or $72.4 per hour.

GRC Lead / Cyber Risk Manager

CyberLinx Solutions LLC

Washington, DC • On-site

$125K - $169K/yr

Full-time

Re-posted 6 days ago

Job description

CyberLinx Solutions LLC is seeking a forward thinking Cybersecurity GRC Lead / Cyber Risk Manager responsible for leading the organization’s cybersecurity governance, risk, and compliance (GRC) program. This role oversees enterprise risk assessments, regulatory compliance, policy development, and security control implementation aligned to industry frameworks such as NIST CSF and NIST RMF.

The ideal candidate will serve as a strategic advisor to leadership, ensuring cybersecurity risks are identified, assessed, and managed in alignment with business objectives and regulatory requirements.

Key Responsibilities:

Governance & Program Leadership

  • Lead and manage the enterprise GRC program, including policies, standards, and procedures
  • Serve as the primary advisor on cybersecurity risk and compliance matters
  • Align cybersecurity strategy with business objectives and regulatory requirements
  • Provide executive-level reporting on risk posture, compliance status, and remediation efforts

Risk Management:

  • Conduct enterprise and system-level cybersecurity risk assessments
  • Develop and maintain risk registers aligned to NIST SP 800-53 and NIST SP 800-171
  • Define risk tolerance, scoring methodologies, and mitigation strategies
  • Perform gap assessments and maturity evaluations using NIST CSF

Compliance & Audit

  • Ensure compliance with federal, state, and industry regulations for NIST RMF, and FISMA as applicable.
  • Lead audit readiness efforts and coordinate internal/external audits
  • Develop Plans of Action & Milestones (POA&M) and track remediation activities
  • Maintain documentation supporting Authority to Operate (ATO) processes

Security Controls & Frameworks

  • Oversee implementation and validation of security controls
  • Map controls across frameworks (NIST CSF, NIST 800-53, ISO 27001)
  • Collaborate with technical teams to ensure control effectiveness

Third-Party Risk Management

  • Evaluate vendor and third-party cybersecurity risks
  • Conduct security assessments and due diligence reviews
  • Ensure contractual security and compliance requirements are met

Required Qualifications:

  • Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or related field
  • 8+ years of experience in cybersecurity, with at least 3–5 years in GRC or risk management leadership roles
  • Strong knowledge of:
    • NIST Cybersecurity Framework (CSF)
    • NIST Risk Management Framework (RMF)
    • NIST SP 800-53 / 800-171
  • Experience supporting audits, compliance programs, and regulatory frameworks
  • Proven ability to lead cross-functional teams and communicate with executive leadership

Apply