1

It Risk Analyst Jobs in Washington (NOW HIRING)

Manager - Cyber Risk & Analysis As a Technology Risk Manager, you will drive strategy and execute ... Please note that this salary information is solely for candidates hired to perform work within one ...

SIMILAR CAREER TITLESCybersecurity Analyst, Information Security Analyst, Security Engineer, Network Security Specialist, Security Administrator, IT Risk Analyst, Cyber Defense Specialist, Security ...

SIMILAR CAREER TITLES Cybersecurity Analyst, Information Security Analyst, Security Engineer, Network Security Specialist, Security Administrator, IT Risk Analyst, Cyber Defense Specialist, Security ...

SIMILAR CAREER TITLES Cybersecurity Analyst, Information Security Analyst, Security Engineer, Network Security Specialist, Security Administrator, IT Risk Analyst, Cyber Defense Specialist, Security ...

SIMILAR CAREER TITLES Cybersecurity Analyst, Information Security Analyst, Security Engineer, Network Security Specialist, Security Administrator, IT Risk Analyst, Cyber Defense Specialist, Security ...

IT Analyst Location: Indian Head, MD Work Type : Onsite Remote Work : NO Gridiron IT is is seeking a Information Technology (IT) professional to services required to maintain a Federal Emergency ...

Business Risk Analyst I Location: Hybrid in Washington DC Work Authorization: US Citizenship ... While we support the use of AI in our business, it is not permitted during interviews, and any ...

Business Risk Analyst I Location: Hybrid in Washington DC Work Authorization: US Citizenship ... While we support the use of AI in our business, it is not permitted during interviews, and any ...

Manager, Cyber Risk & Analysis As a Manager, you will apply your technical expertise, risk ... Cybersecurity and technology risk certifications such as Certified Information Systems Security ...

next page

Showing results 1-20

It Risk Analyst information

See Washington salary details

$17

$45

$74

How much do it risk analyst jobs pay per hour?

As of May 30, 2026, the average hourly pay for it risk analyst in Washington is $45.85, according to ZipRecruiter salary data. Most workers in this role earn between $33.75 and $55.82 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as an IT Risk Analyst, and why are they important?

To thrive as an IT Risk Analyst, you need a strong understanding of risk management frameworks, cybersecurity principles, and regulatory compliance—often supported by a degree in information technology or a related field. Familiarity with tools such as risk assessment software, vulnerability scanners, and certifications like CISSP or CISA is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills that distinguish top performers in this role. These competencies are crucial for accurately identifying risks, ensuring regulatory compliance, and effectively communicating findings to stakeholders.

What are some common challenges IT Risk Analysts face when collaborating with other departments?

IT Risk Analysts often work closely with various departments such as IT, compliance, and operations to identify and mitigate risks. One common challenge is translating technical risk information into terms that non-technical stakeholders can understand. Additionally, balancing the need for rigorous security measures with business objectives can sometimes lead to conflicting priorities. Effective communication and building strong relationships across teams are key to overcoming these challenges and ensuring that risk controls are both practical and effective.

What does an IT Risk Analyst do?

An IT Risk Analyst is responsible for identifying, assessing, and mitigating risks that could impact an organization's information technology systems and data. They analyze potential threats, such as cyberattacks or data breaches, and develop strategies to minimize these risks. Their role involves working closely with other IT professionals to ensure compliance with security policies and regulatory requirements, as well as preparing risk reports and recommending improvements. Ultimately, IT Risk Analysts help organizations protect sensitive information and maintain secure, reliable IT operations.

What is the difference between It Risk Analyst vs Cybersecurity Analyst?

AspectIt Risk AnalystCybersecurity Analyst
CertificationsISO 27001, CISSP, CISACISSP, CEH, CompTIA Security+
Work EnvironmentFinancial, healthcare, corporate sectors focusing on risk managementIT security teams, cybersecurity firms, tech companies
Employer & Industry UsageFinancial institutions, large corporations, consulting firmsTech companies, government agencies, security firms

While both roles focus on protecting information, the It Risk Analyst primarily assesses and manages overall IT risks within organizations, emphasizing compliance and risk mitigation strategies. In contrast, the Cybersecurity Analyst concentrates on defending systems from cyber threats and attacks. Both roles often collaborate but serve distinct functions in an organization's security framework.

What job categories do people searching It Risk Analyst jobs in Washington look for? The top searched job categories for It Risk Analyst jobs in Washington are:
What cities in Washington are hiring for It Risk Analyst jobs? Cities in Washington with the most It Risk Analyst job openings:
Technology Operations Risk Senior

Technology Operations Risk Senior

Freddie Mac

Mclean, VA

Full-time

Posted 16 days ago


Job description

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it's at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose.

Position Overview:

The Technology Operations Risk Senior serves as an embedded First Line of Defense (1LOD) risk professional, partnering with business, technology, and operations leaders to proactively identify, assess, document, and manage technology and operational risks. This role operates with a high degree of autonomy and professional judgment, supporting complex technology environments spanning applications, cloud services, data platforms, and operational processes.

This position is designed for a seniorlevel risk practitioner who plays a key role in regulatory and internal governance execution, including preparation and coordination of risk deliverables, executivelevel materials, and technology risk forum content.

Our Impact:

The Technology Risk function strengthens the firm's control environment by embedding risk awareness into technologyenabled processes. The team works closely with application, platform, and operations teams to support proactive risk identification, issue management, technology resilience, and operational readiness. The team also supports Single Family Acquisitions teams with internal and external oversight deliverables, ensuring compliance and consistent messaging to governing bodies.

Your Impact:
  • Independently lead defined 1LOD technology and operational risk identification, assessment, and documentation activities across applications, platforms, and services

  • Partner closely with application, cloud, infrastructure, and technology operations teams to understand end to end processes, control design, risk drivers, and areas of emerging exposure

  • Serve as a trusted risk partner to technology and business stakeholders, providing practical, risk aligned guidance while maintaining alignment with enterprise expectations

  • Coordinate and support audits, risk and control assessments, and control testing activities, including defining evidence expectations, collecting and validating artifacts, and tracking follow ups

  • Identify, assess, and document technology, cloud, data, and operational risks, including articulation of impacts, dependencies, and mitigating controls

  • Own preparation and coordination of governance and regulatory deliverables, including materials supporting: External regulatory oversight routines, Internal risk governance bodies and senior leadership reviews and responses to ad hoc regulatory or oversight inquiries

  • Lead consolidation of inputs for Technology Risk Forums, working across technology, operations, resilience, and risk stakeholders to develop accurate, decision ready materials, dashboards, and talking points

  • Track technology risk issues, remediation commitments, and risk responses, ensuring clear ownership, escalation, and readiness for governance review

  • Contribute to risk reporting, dashboards, and executive level materials, synthesizing trends, key risks, and emerging themes

  • Support root cause analysis for technology incidents, operational events, and control gaps, documenting implications for risk posture and governance discussion

  • Support technology resilience activities, including coordination with resilience or affinity group forums to document risks, dependencies, testing outcomes, and follow up actions

Qualifications:
  • Bachelor's degree or equivalent professional experience

  • Typically 5 - 7 years of experience in technology risk, operational risk, IT operations, audit, compliance, or a related field

  • Strong working knowledge of technology domains, including applications, cloud services, infrastructure, and service operations

  • Demonstrated ability to operate independently, manage complex deliverables, and apply sound judgment in risksensitive contexts

  • Strong analytical and written communication skills, including the ability to translate technical detail into clear, executive and regulatorready risk narratives

Keys to Success in this Role:
  • Comfortable engaging credibly with senior technology leaders, auditors, and regulatory counterparts

  • Able to balance risk rigor with practical execution, influencing outcomes without formal authority

  • Strong attention to detail, documentation quality, and followthrough

  • Capable of managing multiple timelines tied to governance forums, regulatory deliverables, and audit cycles

Current Freddie Mac employees please apply through the internal career site.

We consider all applicants for all positions without regard to gender, race, color, religion, national origin, age, marital status, veteran status, sexual orientation, gender identity/expression, physical and mental disability, pregnancy, ethnicity, genetic information or any other protected categories under applicable federal, state or local laws. We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

A safe and secure environment is critical to Freddie Mac's business. This includes employee commitment to our acceptable use policy, applying a vigilance-first approach to work, supporting regulatory mandates, and using best practices to protect Freddie Mac from potential threats and risk. Employees exercise this responsibility by executing against policies and procedures and adhering to privacy & security obligations as required via training programs.

CA Applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Notice to External Search Firms: Freddie Mac partners with BountyJobs for contingency search business through outside firms. Resumes received outside the BountyJobs system will be considered unsolicited and Freddie Mac will not be obligated to pay a placement fee. If interested in learning more, please visit www.BountyJobs.com and register with our referral code: MAC.

Time-type:Full timeFLSA Status:Exempt

Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Information on these benefit programs is available on our Careers site.

This position has an annualized market-based salary range of $98,000 - $148,000 and is eligible to participate in the annual incentive program. The final salary offered will generally fall within this range and is dependent on various factors including but not limited to the responsibilities of the position, experience, skill set, internal pay equity and other relevant qualifications of the applicant.Employment Type: FULL_TIME

Freddie Mac logo

About Freddie Mac

Sourced by ZipRecruiter

Today, Freddie Mac makes home possible for one in four home borrowers and is one of the largest sources of financing for multifamily housing. Join our smart, creative and dedicated team and you'll do important work for the housing finance system and make a difference in the lives of others.

Industry

Finance and insurance

Company size

5,001 - 10,000 Employees

Headquarters location

McLean, VA, US

Year founded

1970