ZipRecruiter

Log In

1

Director Technology Risk Management Jobs in Ashburn, VA

Jobtailor

Director, Cyber Risk

Sterling, VA · On-site

$180 - $280/hr

Own and continuously improve the cyber and technology risk management framework, methodology, taxonomy, and lifecycle aligned to NIST CSF 2.0, ISO 27001/27005, and applicable regulatory obligations.

Capital One

Director, Card Risk Management

Mclean, VA · On-site

Director, Card Risk Management As a Director in Capital One's Card Risk organization, you will apply your leadership and analytical skills to our highest profile Risk Management projects. You will ...

Capital One

Director, Card Risk Management

Mclean, VA · On-site

Director, Card Risk Management As a Director in Capital One's Card Risk organization, you will apply your leadership and analytical skills to our highest profile Risk Management projects. You will ...

Capital One

Manager, Cyber Risk & Analysis

Mclean, VA · On-site

This position reports to the Tech & Cyber Risk Director within the Retail Bank. Responsibilities ... Influence updates to policies, standards, control description to enhance risk management activities.

previous pagenext page

Showing results 21-40

All JobsTechnology Risk Management JobsDirector Technology Risk Management JobsDirector Technology Risk Management Jobs in Ashburn, VA

Director Technology Risk Management information

See Ashburn, VA salary details

$55.2K

$146.4K

$265.9K

How much do director technology risk management jobs pay per year?

As of Aug 19, 2026, the average yearly pay for director technology risk management in Ashburn, VA is $146,421.00, according to ZipRecruiter salary data. Most workers in this role earn between $107,900.00 and $171,300.00 per year, depending on experience, location, and employer.

What does a director of technology risk management do?

A Director of Technology Risk Management is responsible for identifying, assessing, and mitigating technology-related risks within an organization. They develop and implement policies, frameworks, and strategies to ensure that IT systems and processes comply with regulatory requirements and best practices. Their work helps protect the company's data, assets, and reputation from threats such as cyberattacks, data breaches, and system failures. They also collaborate with other departments to promote a culture of risk awareness and provide guidance on risk-related matters.

How does a director of technology risk management typically collaborate with other departments to ensure effective risk mitigation?

A Director of Technology Risk Management works closely with IT, compliance, legal, and business operations teams to identify and address technology risks. This involves leading cross-functional risk assessments, facilitating communication between technical and non-technical stakeholders, and ensuring that risk mitigation strategies align with organizational goals. Regular meetings, workshops, and reporting structures are established to maintain transparency and drive a culture of risk awareness across departments. Effective collaboration is essential for implementing controls and responding proactively to emerging threats.

What are the key skills and qualifications needed to thrive as a director of technology risk management, and why are they important?

To excel as a Director of Technology Risk Management, a strong background in information security, risk assessment, regulatory compliance, and a relevant degree such as in computer science or information systems is essential. Familiarity with risk management frameworks (such as NIST, ISO 27001), GRC (Governance, Risk, and Compliance) platforms, and certifications like CISSP or CISM are commonly required. Leadership, strategic thinking, and effective communication skills are vital for driving risk initiatives and collaborating across business units. These competencies ensure robust risk mitigation, regulatory adherence, and alignment of technology strategies with organizational goals.

What is the difference between Director Technology Risk Management vs Cybersecurity Manager?

AspectDirector Technology Risk ManagementCybersecurity Manager
Primary FocusOverseeing technology risk strategies and enterprise risk mitigationManaging cybersecurity operations and security measures
CertificationsCRISC, CISSP, CISMCISSP, CISA, CEH
Work EnvironmentStrategic, cross-departmental, executive levelOperational, technical teams, security operations centers
Industry UsageFinancial, healthcare, large enterprisesIT security firms, corporate IT departments

The main difference is that the Director Technology Risk Management focuses on broad technology risk strategies across the organization, while the Cybersecurity Manager concentrates on implementing and managing cybersecurity measures. Both roles require similar certifications but differ in scope and strategic versus operational responsibilities.

What are the most commonly searched types of Technology Risk Management jobs in Ashburn, VA?

The most popular types of Technology Risk Management jobs in Ashburn, VA are:

What are popular job titles related to Director Technology Risk Management jobs in Ashburn, VA?

For Director Technology Risk Management jobs in Ashburn, VA, the most frequently searched job titles are:

What job categories do people searching Director Technology Risk Management jobs in Ashburn, VA look for?

The top searched job categories for Director Technology Risk Management jobs in Ashburn, VA are:

What cities near Ashburn, VA are hiring for Director Technology Risk Management jobs?

Cities near Ashburn, VA with the most Director Technology Risk Management job openings:

Director Technology Risk Management jobs near you
Infographic showing various Director Technology Risk Management job openings in Ashburn, VA as of August 2026, with employment types broken down into 82% Full Time, 12% Part Time, and 6% Contract. Highlights an 88% In-person, and 12% Remote job distribution, with an average salary of $146,421 per year, or $70.4 per hour.

Supplier Risk Management (SRM) Assessor

Accelyst, LLC

Mclean, VA • On-site

Other

Posted 15 days ago

Job description

About

Accelyst is an innovative AI Consultancy that leverages a unique catalog of industry-specific AI Agents and leading-edge AI platforms to deliver tangible, integrated, secure, and ROI-optimized solutions. We combine deep industry and technical expertise to enable rapid deployment of innovative AI-driven capabilities that augment and automate client workflows for employees, customers, prospects, and investors.

Why Accelyst?

Join Accelyst and become part of a high-performing team delivering enterprise-scale cybersecurity, cloud, and digital transformation initiatives. Our leadership team brings extensive consulting and technology expertise while fostering a collaborative, client-focused environment where innovation, professional growth, and technical excellence are valued. You''''ll work on complex enterprise security programs that strengthen organizational resilience while advancing your career in cybersecurity program delivery.

Supplier Risk Management (SRM) Assessor

Employment Type: Contract
Work Model: Onsite (5 Days/Week)
Start Date: Immediate

Position Overview

We are seeking a detail-oriented Supplier Risk Management (SRM) Assessor to evaluate and manage risks associated with third-party suppliers and vendors. The successful candidate will assess supplier controls across technology, cybersecurity, privacy, operational resilience, and compliance domains while identifying potential risks and recommending mitigation strategies.

This role requires strong analytical capabilities, risk assessment expertise, stakeholder management skills, and the ability to handle sensitive information in a fast-paced environment.

Key Responsibilities

Supplier Risk Assessments

  • Conduct comprehensive supplier risk assessments across multiple domains, including:
    • Technology Risk
    • Information Security Risk
    • Privacy Risk
    • Cybersecurity Risk
    • Operational Resilience Risk
    • Business Continuity Risk
  • Evaluate supplier controls and identify potential gaps, weaknesses, and areas of concern.
  • Assess supplier compliance with organizational risk standards and policies.

Risk Analysis & Reporting

  • Analyze findings and document risk assessment results.
  • Prepare clear, comprehensive risk reports for stakeholders and management.
  • Develop risk ratings and recommend appropriate mitigation strategies.
  • Track remediation activities and monitor progress toward risk resolution.

Supplier Due Diligence

  • Review financial, operational, and business information provided by suppliers.
  • Conduct supplier research using public sources, questionnaires, documentation, and stakeholder interviews.
  • Assess supplier capabilities, stability, and risk exposure.

Stakeholder Collaboration

  • Collaborate with internal business, technology, security, compliance, and risk teams.
  • Communicate assessment outcomes, risks, issues, and recommendations effectively.
  • Escalate critical risks, concerns, or delays to leadership when necessary.

Process Improvement

  • Support the enhancement and optimization of supplier risk management processes.
  • Contribute to best practices for third-party risk assessment and governance.
  • Assist with ongoing risk monitoring and program maturity initiatives.

Required Skills

Risk Management

  • Supplier Risk Management (SRM)
  • Third-Party Risk Management (TPRM)
  • Enterprise Risk Management
  • Operational Risk Management
  • Technology Risk Assessment
  • Information Security Risk
  • Privacy Risk Assessment
  • Cybersecurity Risk Assessment
  • Business Resiliency & Continuity Risk
  • Risk Analysis & Evaluation
  • Control Assessment & Validation
  • Risk Mitigation Planning
  • Risk Documentation & Reporting

Technical Skills

  • Microsoft Office Suite (Excel, Word, PowerPoint)
  • Data Analysis and Data Entry
  • Documentation and Reporting
  • Internet and Supplier Research
  • Risk Assessment Tools and Methodologies

Soft Skills

  • Strong analytical and critical thinking abilities
  • Excellent written and verbal communication skills
  • Strong organizational and time management skills
  • Attention to detail
  • Problem-solving capabilities
  • Stakeholder management and collaboration
  • Ability to handle confidential information with discretion
  • Ability to work independently and proactively
  • Adaptability in a dynamic, fast-paced environment

Required Experience

  • Experience in:
    • Supplier Risk Management (SRM)
    • Third-Party Risk Management (TPRM)
    • Operational Risk Management
    • Enterprise Risk Management
  • Experience conducting risk assessments and control evaluations.
  • Experience identifying, documenting, and reporting risk findings.
  • Experience developing remediation recommendations and mitigation strategies.
  • Experience working with sensitive financial and business information.
  • Experience coordinating multiple assessments and priorities simultaneously.
  • Project coordination or project management experience is preferred.

Preferred Qualifications

  • Background in:
    • Risk Management
    • Information Security
    • Cybersecurity
    • Compliance
    • Internal Audit
    • Privacy
    • Governance
  • Experience performing vendor and supplier assessments.
  • Understanding of third-party risk management frameworks.
  • Knowledge of operational resilience and business continuity principles.
  • Familiarity with enterprise risk management methodologies and industry best practices.

Key Competencies

  • Third-Party Risk Management
  • Supplier Due Diligence
  • Risk Assessment & Analysis
  • Control Effectiveness Reviews
  • Cybersecurity & Information Security Risk
  • Compliance & Governance
  • Stakeholder Communication
  • Reporting & Documentation
  • Process Improvement
  • Project Coordination

Interview Process

Round 1: Virtual Interview

Round 2: Technical/Panel Interview

Success Profile

The ideal candidate is a proactive risk professional who can independently drive supplier assessments from initiation through completion, communicate findings effectively, influence stakeholders, and help strengthen the organization''''s third-party risk management program.

Apply