ZipRecruiter

Log In

1

Cybersecurity Risk Management Jobs in Ashburn, VA

ASSYST, Inc.

Cybersecurity Risk Advisor

Washington, DC · On-site

ASSYST is seeking a Cybersecurity Risk Advisor to support federal Cybersecurity program. The ... They will act as the subject matter expert in all areas of the Risk Management Framework (RMF) and ...

Ops Tech Alliance

Cybersecurity Risk Analyst

Mclean, VA

$100K - $150K/yr

Cybersecurity Risk Analyst Salary Range: $100,000 - $150,000 Clearance: TS/SCI + CI Poly Location ... Experience with RMF, ATO, NIST SP 800-53, continuous monitoring, vulnerability management, or SOC ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

... cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security ...

next page

Showing results 1-20

All JobsCybersecurity Risk Management JobsCybersecurity Risk Management Jobs in Ashburn, VA

Cybersecurity Risk Management information

See Ashburn, VA salary details

$58.3K

$136K

$190.2K

How much do cybersecurity risk management jobs pay per year?

As of Sep 8, 2026, the average yearly pay for cybersecurity risk management in Ashburn, VA is $135,968.00, according to ZipRecruiter salary data. Most workers in this role earn between $113,500.00 and $153,400.00 per year, depending on experience, location, and employer.

What is cybersecurity risk management?

Cybersecurity risk management is the process of identifying, assessing, and prioritizing risks to an organization's digital assets and information systems. It involves implementing strategies and controls to minimize the impact of potential cyber threats, such as data breaches, malware, and unauthorized access. The goal is to balance security measures with business needs, ensuring sensitive information remains protected while maintaining operational efficiency. Effective risk management is ongoing, adapting to new threats and changes within the organization.

What are the key skills and qualifications needed to thrive in cybersecurity risk management, and why are they important?

To thrive in Cybersecurity Risk Management, you need a solid understanding of information security principles, risk assessment methodologies, compliance standards, and typically a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security tools, and professional certifications like CISSP or CRISC is highly valued. Strong analytical thinking, effective communication, and problem-solving skills help professionals translate technical risks for non-technical stakeholders and foster collaboration. These competencies are crucial to proactively identifying threats, managing vulnerabilities, and ensuring organizational resilience in a rapidly evolving digital landscape.

What are some common challenges faced by professionals in cybersecurity risk management, and how can they be addressed?

Professionals in Cybersecurity Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, balancing security needs with business objectives, and ensuring compliance with industry regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and close collaboration with IT, legal, and business teams. Building strong partnerships across departments and investing in ongoing training can help mitigate these obstacles and support proactive risk management.

What is the difference between Cybersecurity Risk Management vs Cybersecurity Analyst?

AspectCybersecurity Risk ManagementCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government, large enterprisesIT departments, cybersecurity firms, corporate security teams

Cybersecurity Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy creation and strategic planning. In contrast, a Cybersecurity Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities. Both roles require similar certifications but serve different functions within cybersecurity teams.

What are popular job titles related to Cybersecurity Risk Management jobs in Ashburn, VA?

For Cybersecurity Risk Management jobs in Ashburn, VA, the most frequently searched job titles are:

What job categories do people searching Cybersecurity Risk Management jobs in Ashburn, VA look for?

The top searched job categories for Cybersecurity Risk Management jobs in Ashburn, VA are:

What cities near Ashburn, VA are hiring for Cybersecurity Risk Management jobs?

Cities near Ashburn, VA with the most Cybersecurity Risk Management job openings:

Cybersecurity Risk Management jobs near you
Infographic showing various Cybersecurity Risk Management job openings in Ashburn, VA as of September 2026, with employment types broken down into 1% As Needed, 85% Full Time, 11% Part Time, and 3% Contract. Highlights an 86% Physical, 2% Hybrid, and 12% Remote job distribution, with an average salary of $135,968 per year, or $65.4 per hour.

Cybersecurity Risk Management and Compliance - Technical

US Department of Homeland Security

Springfield, VA

$106K/yr

Full-time

Posted 8 days ago

Key responsibilities

  • Support the documentation, validation, assessment, and authorization processes to ensure IT systems meet cybersecurity and risk requirements.

  • Evaluate and support risk management strategies to inform decision makers for organizational and national cybersecurity risk decisions.

  • Apply knowledge of federal cybersecurity requirements and industry tools to oversee cybersecurity risk management and compliance activities.

U.S. Department Of Homeland Security rating

7.8

Company rating: 7.8 out of 10

Based on 86 frontline employees who took The Breakroom Quiz

100th of 299 rated public sector bodies

Job description

The Department of Homeland Security (DHS) is recruiting professionals to support a range of technical roles in Cybersecurity Risk Management and Compliance including, Cybersecurity Risk Management Analyst, Cybersecurity Policy Analyst, Technical Support Specialist, and Cybersecurity Supply Chain Risk Management Expert. All positions are in the DHS Cybersecurity Service.Qualifications:DHS Cybersecurity Service employees start at career levels and salaries matching their experience and expertise. In recruiting for this opportunity, DHS may hire employees at higher or lower career levels and associated salaries. This position is in the Technical Track across a range of career levels. Employees in this career track generally:
  • Have between 5-15 years of cybersecurity work experience.
  • Range from experienced cybersecurity professionals who apply technical expertise and independent judgement to perform cybersecurity work - to - recognized Federal cybersecurity technical authorities with uncommon technical expertise who advise on cybersecurity challenges impacting DHS and the Nation.
Depending on their career level, DHS Cybersecurity Service employees with a technical capability Cybersecurity Risk Management and Compliance will generally apply their technical expertise to:
  • Oversee, evaluate, and support the documentation, validation, assessment, and authorization processes necessary to ensure that existing and new information technology systems meet the Department's cybersecurity and risk requirements, and provide decision makers with the knowledge to make well-informed risk decisions.
  • Ensure that strategic considerations drive investment and operational decisions with regard to managing risk to organizational operations (including mission, function, image and reputation), organizational assets, individuals, other organizations (collaborating or partnering with federal agencies and contractors) and the nation.
  • Understand and utilize the National Institute of Standards and Technology (NIST) series of documents.
DHS Cybersecurity Service employees start at career levels and salaries matching their experience and expertise. In recruiting for this opportunity, DHS may hire employees at higher or lower career levels and associated salaries. To learn more about DHS Cybersecurity Service career tracks and levels, visit our application portal.
This position is focused on Cybersecurity Risk Management and Compliance.
DHS Cybersecurity Service jobs are structured cybersecurity specializations - called technical capabilities. To learn more about technical capabilities, visit our application portal.

DESIRED CERTIFICATION:

  • Certified Cloud Security Professional (CCSP)
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Security Professional (CISSP)
DESIRED TOOLS/INDUSTRY EXPERIENCE:
  • Knowledge of federal cybersecurity requirements (e.g., Federal Information Security Management Act (FISMA), relevant Executive Orders, Office of Management and Budget (OMB) memoranda).
  • Exposure to tools/technologies required to implement or oversee hardware/software asset management; identity, credential, and access management; data discovery; secure cloud services; intrusion detection and prevention; endpoint detection and response; cyber threat intelligence; enterprise cybersecurity risk management; supply chain risk management.
Education:Degrees are not required for jobs in the DHS Cybersecurity Service, but DHS is interested in your level of education and the topics you studied. As you submit initial application information, you will be asked questions about your education.Employment Type: OTHER

What U.S. Department Of Homeland Security employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

U.S. Department of Homeland Security logo

About U.S. Department of Homeland Security

Sourced by ZipRecruiter

The US Department of Homeland Security (DHS) is a federal agency operating within the government services industry in Washington, DC, US. Established in 2003, the DHS is directly responsible for public security, roughly comparable to the interior or home ministries of other countries. Its main responsibilities include protecting the United States from and responding to terrorist attacks, man-made accidents, and natural disasters. Through its more than 20 component agencies including Coast Guard, Customs and Border Protection, Immigration and Customs Enforcement, it ensures the safety of the US through numerous programs and initiatives. The DHS upholds a core value system with the mission of safeguarding the American people, our homeland, and values. Notably, the DHS plays a critical role in the spectral range of activities to prepare, prevent, and respond to possible threats to the US.

Industry

Public administration

Company size

10,000+ Employees

Headquarters location

Washington, DC, US

Year founded

2003

View All U.S. Department of Homeland Security Jobs

Apply