ZipRecruiter

Log In

1

Information Risk Manager Jobs (NOW HIRING)

Customer Value Partners

Risk Manager

Rockville, MD · On-site

Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

$155K - $165K/yr

Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for ...

CE2 Corporation

Be Seen First

Risk Manager

Berkeley, CA · On-site

$90/hr

The Manager will be responsible for leading, administer and improve the program. Job ... Experience integrating risk information with an Integrated Master Schedule, cost estimate, Estimate ...

International Executive Service Corps

The Senior Project Risk Manager shall provide independent, objective, and decision-ready risk information to ALS-U Project leadership and shall work closely with the Project Director, Project Manager ...

Brayman Construction

Risk Manager

Saxonburg, PA · On-site

Ability to multi-task and manage confidential information. * Previous experience with risk management recording tools. * High working-level knowledge of traditional property and casualty policies and ...

Brayman Construction

Risk Manager

Saxonburg, PA · On-site

Ability to multi-task and manage confidential information.Previous experience with risk management recording tools.High working-level knowledge of traditional property and casualty policies and ...

CACI

Risk Manager

Reston, VA · On-site

Risk Manager Job Category: Project and Program Management Time Type: Full time Minimum Clearance ... The GMOS contract aims to provide world-class IT support by modernizing and maintaining ...

CACI International, Inc.

Risk Manager

Reston, VA · On-site

Risk Manager Job Category: Project and Program Management Time Type: Full time Minimum Clearance ... The GMOS contract aims to provide world-class IT support by modernizing and maintaining ...

Career Launch AI

Risk Manager

New York, NY · On-site

$140K - $185K/yr

For more information on the Career Launch AI Talent Network, visit: Position Overview The Risk Manager is responsible for identifying, analyzing, and mitigating financial, operational, and market ...

New

Oregon Metro

Risk Manager

Portland, OR · On-site +1

$122K - $156K/yr

Supervise risk management staff and provide coaching, direction, and performance management ... Maintains confidentiality and handles sensitive information with professionalism DIVERSITY AND ...

Jaquith Consulting Group Inc

Risk Manager

Sacramento, CA · On-site

$110K - $165K/yr

The role helps ensure that risk-related information is current, accurate, and aligned with program objectives. Key Responsibilities * Support the implementation of program-wide risk management ...

previous page

Showing results 41-60

All JobsInformation Risk JobsInformation Risk Manager Jobs

Information Risk Manager information

See salary details

$51.5K

$111.6K

$170K

How much do information risk manager jobs pay per year?

As of Sep 11, 2026, the average yearly pay for information risk manager in the United States is $111,556.00, according to ZipRecruiter salary data. Most workers in this role earn between $90,000.00 and $129,000.00 per year, depending on experience, location, and employer.

What does an information risk manager do?

An Information Risk Manager is responsible for identifying, assessing, and mitigating risks related to an organization's information assets. They develop and implement risk management policies, conduct regular risk assessments, and ensure compliance with relevant standards and regulations. Their role often involves collaborating with IT, security, and business teams to protect sensitive data and support business continuity. By proactively managing information risks, they help organizations minimize the potential impact of security threats and data breaches.

What are the key skills and qualifications needed to thrive as an information risk manager?

To thrive as an Information Risk Manager, you need expertise in risk assessment, information security principles, and regulatory compliance, often supported by a degree in information technology or cybersecurity and relevant certifications like CISSP or CISM. Familiarity with risk management tools, governance frameworks (such as ISO 27001), and security incident management systems is typical. Strong analytical thinking, communication, and stakeholder management skills help set top performers apart. These capabilities are crucial for proactively identifying, assessing, and mitigating information risks to protect organizational assets and ensure compliance.

What are some common challenges information risk managers face when implementing new risk mitigation strategies?

Information Risk Managers often encounter resistance to change from employees and stakeholders when introducing new risk mitigation strategies. Balancing security requirements with business objectives can also be challenging, as overly restrictive controls may hinder productivity. Additionally, staying updated with evolving cyber threats and ensuring compliance with various regulatory standards requires continuous learning and adaptation. Successful Information Risk Managers proactively communicate the value of risk initiatives and foster collaboration across departments to achieve buy-in.

What is the difference between Information Risk Manager vs Cybersecurity Analyst?

AspectInformation Risk ManagerCybersecurity Analyst
CertificationsISO 27001 Lead Implementer, CISSP, CISMCISSP, CompTIA Security+, CEH
Work EnvironmentRisk assessment, policy development, compliance managementSecurity monitoring, incident response, vulnerability assessment
Employer & IndustryFinancial, healthcare, government, large enterprisesIT firms, security service providers, corporate IT teams

The main difference is that an Information Risk Manager focuses on identifying, assessing, and managing overall information risks and compliance strategies, while a Cybersecurity Analyst primarily handles security monitoring, threat detection, and incident response. Both roles require similar certifications and often work within the same industries, but their core responsibilities differ in scope and focus.

What cities are hiring for Information Risk Manager jobs?

Cities with the most Information Risk Manager job openings:

What states have the most Information Risk Manager jobs?

States with the most job openings for Information Risk Manager jobs include:

What are popular job titles related to Information Risk Manager jobs?

For Information Risk Manager jobs, the most frequently searched job titles are:

Information Risk Manager jobs near you
Infographic showing various Information Risk Manager job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 73% Full Time, 23% Part Time, and 3% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $111,556 per year, or $53.6 per hour.

Risk Manager

Rockville, MD • On-site

Customer Value Partners
Professional, Scientific, and Technical Services • 51 - 200 employees
Learn more about Customer Value Partnersexternal

Full-time

Re-posted 15 days ago

Job description

Overview
CVP is seeking an Cybersecurity Risk Manager for a large government agency enterprise-level cybersecurity program. The Cybersecurity Risk Manager will work directly with the Cybersecurity Program Manager and the agency's CIO and CISO in cybersecurity tasks such as information security policy development and implementation; security compliance monitoring; security audit management; risk assessment; system authorization; security reporting; and other information security-related tasks.
Responsibilities
  • Identify, evaluate, and develop strategies for handling risks to reduce information security and privacy risk across the agency.
  • Provide recommendations, guidance, planning, and implementation support for agency risk management activities and tools, and provide support as needed to enhance the agency's Information Security Program related to governance, optimizations, automation, and supporting tools.
  • Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for Information Systems and Organizations and SP 800-39, Managing Information Security Risk (as revised).
  • Conducting an enterprise risk assessment and developing an agency Information Security Risk Assessment Report that addresses all findings from the assessment
  • Developing an agency Privacy and Security Roadmap that recommends privacy and information security capabilities based on risks identified in the agency's Information Security Risk Assessment Report
  • Developing an agency Information Security Risk Management Plan that addresses how the agency will implement and perform risk management activities regarding risk tolerance, risk assessment, risk response, risk monitoring, and risk capabilities
  • Providing risk management guidance to the agency offices for A&A activities as required, ensuring continuous risk monitoring of information security control implementation effectiveness and required information security compliance requirements
  • Support the Information Security and Assurance Office (ISAO) in implementing and overseeing the organization's information security risk management and security assessment and authorization (A&A) activities.
  • Advise the agency on how best to tailor the revised A&A process to handle non-traditional technologies including, but not limited to, cloud, mobile, and Internet of Things.
  • Provide the agency recommendations on how it can continuously monitor and assess the security posture of agency information systems over time and alert agency decision makers when an information system presents an increased risk or eminent threat to agency data and/or operations.
  • Develop guidance, templates, other tools, and advice to the program offices to support their risk management and ATO activities.
  • Provide risk management and information security continuous monitoring program implementation recommendations to program offices
  • Track and review Plans of Actions and Milestones (POA&Ms) agency-wide to identify areas of risk as a result of unimplemented POA&Ms, a buildup of risk-based decisions, or other cross-cutting issues observed as a result of its risk management support.
  • Track the A&A status for all divisions and programs that have information systems to validate they meet the requirements to protect the agency's data and operations.
  • Develop the required artifacts to complete security accreditation packages for OCIO information systems and perform any required assessments, as requested. The Contractor shall provide oversight and advisory support to agency program office personnel for completion of information system A&A packages, as requested.
  • Follow NIST Federal Information Processing Standards (FIPS) and Special Publications (SPs) to include, but not limited to, FIPS 199 and 200, SP 800-39, SP 800-37, SP 800-137, SP 800-60, SP 800-53, SP 800-53A, SP 800-34, SP 800-30, and SP 800-18. The Contractor shall comply with all agency IT security and Privacy policies and standards including, and the agency Privacy Impact Assessment (PIA) requirements and associated templates.

Qualifications
  • Minimum of six years' experience in cybersecurity. 10+ years' experience is preferred.
  • Minimum of six years' experience leading and delivering in FISMA-based and FedRAMP Assessment and Authorization (A&A) programs for comparably sized federal agencies and programs. Seven plus years' experience is preferred.
  • Shall have at least one of the following industry-recognized certifications:
    • Certified Information System Security Professional (CISSP)
    • Certified Information Systems Auditor (CISA)
    • Certified Information Security Manager (CISM)
    • Certified in Risk and Information Systems Control (CRISC)
  • Familiarity with Information Technology Infrastructure Library (ITIL) Foundation Compliance (GRC) tool, continuous monitoring, and vulnerability management tools or services. Note: NIH currently uses CSAM.
  • Demonstrated experience managing cybersecurity teams including personnel, workload, priorities, scheduling, and risks.
  • Proven experience bringing innovative approaches to help reduce the FISMA workload and time to authorization/reauthorization through such methods as boundary consolidation, common control identification and re-use, automation, assessment readiness reviews, and digital transformation.

Desired Skills
  • PMP Certification
  • CISSP Certification
  • Experience with Security Assessment Tools (Tenable Nessus, DBProtect, Wireshark, WebInspect)
  • NIH/HHS experience

Location
  • Rockville, MD (Hybrid)

Salary Band: $155-165k (Depending on experience)
About CVP
CVP is an award-winning healthcare and next-gen technology and consulting services firm solving critical problems for healthcare, national security, and public sector clients. We help organizations achieve lasting transformation.
CVP is an Equal Opportunity Employer dedicated to actively recruiting individuals and providing advancement opportunities based on merit and legitimate job qualifications. We ensure that all associates receive equal opportunities based on their personal qualifications and job requirements. CVP strictly prohibits any form of discrimination or harassment.
At CVP, we cultivate a work environment that encourages fairness, teamwork, and respect among all associated. We are committed to maintaining a workplace where everyone can grow both personally and professionally.

Apply