ZipRecruiter

Log In

1

Operational Risk Manager Jobs in Hamilton, VA (NOW HIRING)

Deloitte

Cyber Insider Risk Manager

Mclean, VA

Qualifications Required: 6+ years of experience in insider risk, security operations, investigations, compliance, data protection, or enterprise risk management 2+ years of experience managing an ...

Freddie Mac

IT Risk Senior

Mclean, VA · On-site

The Enterprise Operations & Technology (EO&T) Risk Governance Team provides risk management support for the maturation of the EO&T division's model risk governance process, third-party vendor risk ...

System One

Risk Analyst

Vienna, VA · Remote

Focus on specific types of risk such as financial or operational risk. * Provide advice to management based on risk assessments. * Utilize professional qualifications or equivalent experience in risk ...

System One

Risk Analyst

Vienna, VA · Remote

Focus on specific types of risk such as financial or operational risk. * Provide advice to management based on risk assessments. * Utilize professional qualifications or equivalent experience in risk ...

System One

Risk Analyst

Vienna, VA · Remote

Focus on specific types of risk such as financial or operational risk. * Provide advice to management based on risk assessments. * Utilize professional qualifications or equivalent experience in risk ...

System One

Risk Analyst

Vienna, VA · Remote

Focus on specific types of risk such as financial or operational risk. * Provide advice to management based on risk assessments. * Utilize professional qualifications or equivalent experience in risk ...

Capital One

Principal Risk Specialist

Mclean, VA · On-site

$99K/yr

Principal Risk Specialist The Principal Risk Specialist is responsible for performing business ... Identifies and implements effective controls to manage operational, financial, and compliance risks.

Capital One

Principal Risk Specialist

Mclean, VA

$99K/yr

Principal Risk Specialist The Principal Risk Specialist is responsible for performing business ... Identifies and implements effective controls to manage operational, financial, and compliance risks.

next page

Showing results 1-20

All JobsOperational Risk JobsOperational Risk Manager JobsOperational Risk Manager Jobs in Hamilton, VA

Operational Risk Manager information

See Hamilton, VA salary details

$48.1K

$123.5K

$242.6K

How much do operational risk manager jobs pay per year?

As of Jul 22, 2026, the average yearly pay for operational risk manager in Hamilton, VA is $123,544.00, according to ZipRecruiter salary data. Most workers in this role earn between $75,200.00 and $162,700.00 per year, depending on experience, location, and employer.

What Does an Operational Risk Manager Do?

An operational risk manager works to identify and limit the risk associated with a company’s operations. As an operational risk manager, your responsibilities involve assessing business operations, identifying issues, and creating reports on your findings. You then help develop policies and implement changes to lessen operational risks. Other duties include continually monitoring the business to find potential new threats and ensuring company compliance with laws and regulations.

What are the 4 pillars of operational risk management?

The four pillars of operational risk management are risk identification, risk assessment, risk mitigation, and risk monitoring. An Operational Risk Manager uses these pillars to develop strategies that minimize potential losses from internal processes, people, systems, or external events, often utilizing tools like risk dashboards and frameworks such as Basel II. Mastery of these pillars is essential for effective risk oversight and compliance.

What does an operational risk manager do?

An operational risk manager identifies, assesses, and monitors risks that could disrupt a company's operations, such as process failures, fraud, or system outages. They develop strategies to mitigate these risks, ensure compliance with regulations, and often use risk management tools and data analysis to support decision-making.

Do risk managers make good money?

Operational Risk Managers typically earn competitive salaries that vary by industry, experience, and location. According to industry data, the median annual salary ranges from $80,000 to over $130,000, with additional compensation such as bonuses and certifications like FRM or ORM enhancing earning potential.

What are some common challenges faced by Operational Risk Managers in maintaining effective risk controls across different departments?

Operational Risk Managers often encounter challenges in ensuring consistent risk controls due to varying processes, priorities, and risk appetites across departments. Communication gaps and resistance to change can make it difficult to implement standardized procedures. Successfully overcoming these challenges involves building strong cross-functional relationships, conducting regular training, and fostering a risk-aware culture to ensure alignment on risk management practices throughout the organization.

What are the three C's of operational risk management?

The three C's of operational risk management are Culture, Controls, and Communication. These elements help organizations identify, assess, and mitigate risks effectively, which is essential for an Operational Risk Manager to ensure operational resilience and compliance. Developing strong controls and fostering a risk-aware culture are key skills in this role.

What are the key skills and qualifications needed to thrive as an Operational Risk Manager, and why are they important?

To thrive as an Operational Risk Manager, you need a solid understanding of risk assessment, regulatory compliance, and internal controls, typically supported by a degree in finance, business, or a related field. Familiarity with risk management frameworks, GRC (governance, risk, and compliance) systems, and certifications such as FRM or ORM are highly valued. Strong analytical thinking, attention to detail, and effective communication skills set top performers apart in this role. These competencies are crucial for identifying, mitigating, and communicating operational risks, ensuring organizational stability and regulatory adherence.

What is the difference between Operational Risk Manager vs Risk Analyst?

AspectOperational Risk ManagerRisk Analyst
CertificationsCFA, FRM, or similarCFA, FRM, or similar
Work EnvironmentFinancial institutions, banks, insurance companiesFinancial firms, consulting, corporate risk teams
ResponsibilitiesIdentify, assess, and mitigate operational risks; develop risk frameworksAnalyze risk data, support risk assessments, prepare reports

The Operational Risk Manager focuses on managing and mitigating operational risks within organizations, often holding certifications like CFA or FRM. In contrast, Risk Analysts primarily analyze risk data and support risk management processes. Both roles are vital in financial sectors and share similar credentials, but the Operational Risk Manager has a broader responsibility for risk mitigation strategies.

More about Operational Risk Manager jobs
What cities near Hamilton, VA are hiring for Operational Risk Manager jobs? Cities near Hamilton, VA with the most Operational Risk Manager job openings:
Operational Risk Manager jobs near you
Cyber Insider Risk Manager

Cyber Insider Risk Manager

Deloitte

Mclean, VA

Other

Posted 15 days ago

Job description

Cyber Defense & Resilience - Insider Risk Manager

Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities? If so, Deloitte & Touche LLP could be the place for you. Traditional security and integrated risk programs have often been unsuccessful in unifying the need to both secure, automate and support technology innovation required by the business.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Insider Risk Manager on the Cyber team, you will be responsible for:

Developing comprehensive strategies for insider risk programs, including program assessments and roadmaps, using Deloitte's Insider Risk capability framework and industry practices

Assisting in the operation of client insider risk programs, overseeing a dedicated team of investigators in the triage, analysis, investigation, and remediation of insider risk-related inquiries

Leading client workshops, interviews, and process walkthroughs with cross-functional stakeholders, including Human Resources, Legal, Privacy, and Security, to document business processes, goals, and program requirements

Aligning insider risk indicator and policy development with business needs and industry-leading standards, frameworks, and practices, including the CERT Insider Threat Framework, National Insider Threat Task Force guidelines, and MITRE ATT&CK for Enterprise

Designing and implementing insider risk detection use cases, monitoring processes, and escalation workflows using Security Information and Event Management, User and Entity Behavior Analytics, and Data Loss Prevention capabilities

Evaluating insider risk scenarios, high-risk user groups, and crown jewel assets to help clients prioritize and deploy monitoring, detection, response, and program management capabilities

A successful candidate would possess these skills:

Ability to work independently and collaborate as part of a team

Effective written and verbal communication skills

Meticulous attention to detail and quality of work product

Ability to build and sustain professional relationships

Ability to lead projects or workstreams

Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment

Strong interpersonal skills and professional demeanor

Ability to meet deadlines

Ability to mentor and provide clear guidance to others

The team

Deloitte's Cyber team helps complex organizations more confidently pursue their growth, innovation and performance agendas through proactive management of the associated business and cyber risks. Our professionals provide advisory and implementation services that integrate risk, regulatory, and technology skills to help clients transform their legacy programs. We work across a variety of different risk and compliance programs that extend well beyond Cyber Risk. Learn more about Deloitte Advisory's Cyber Risk Services practice.

Qualifications

Required:

6+ years of experience in insider risk, security operations, investigations, compliance, data protection, or enterprise risk management

2+ years of experience managing an insider risk program or conducting insider risk investigations and monitoring insider risk behaviors

Experience using Security Information and Event Management, User and Entity Behavior Analytics, and Data Loss Prevention tools to support insider risk operations

Experience developing insider risk procedures, playbooks, workflows, metrics, or governance models

Experience working with cross-functional stakeholders such as Human Resources, Legal, Privacy, Ethics, or Security

Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

Limited immigration sponsorship may be available.

Preferred:

Bachelor's degree or equivalent experience

Experience in consulting or professional services

Experience responding to and recovering from cybersecurity incidents

Hands-on experience configuring, tuning, and operationalizing UEBA and/or User Activity Monitoring (UAM) platforms to support insider risk detection (e.g., Splunk UEBA, Proofpoint ITM, Microsoft Purview IRM, etc.)

Hands-on experience with at least one Data Loss Prevention solution such as Microsoft Purview, Proofpoint DLP, or Zscaler DLP

One or more of the following certifications: CERT Insider Threat Program Manager Certificate, CERT Insider Threat Analyst, CERT Insider Risk Measure Management Measures of Effectiveness, Certified Information Systems Security Professional, Certified Information Privacy Professional, Certified Information Security Manager, or Certified Information Systems Auditor

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

#CyberCDR27


Qualifications:

Cyber Defense & Resilience - Insider Risk Manager

Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities? If so, Deloitte & Touche LLP could be the place for you. Traditional security and integrated risk programs have often been unsuccessful in unifying the need to both secure, automate and support technology innovation required by the business.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Insider Risk Manager on the Cyber team, you will be responsible for:

Developing comprehensive strategies for insider risk programs, including program assessments and roadmaps, using Deloitte's Insider Risk capability framework and industry practices

Assisting in the operation of client insider risk programs, overseeing a dedicated team of investigators in the triage, analysis, investigation, and remediation of insider risk-related inquiries

Leading client workshops, interviews, and process walkthroughs with cross-functional stakeholders, including Human Resources, Legal, Privacy, and Security, to document business processes, goals, and program requirements

Aligning insider risk indicator and policy development with business needs and industry-leading standards, frameworks, and practices, including the CERT Insider Threat Framework, National Insider Threat Task Force guidelines, and MITRE ATT&CK for Enterprise

Designing and implementing insider risk detection use cases, monitoring processes, and escalation workflows using Security Information and Event Management, User and Entity Behavior Analytics, and Data Loss Prevention capabilities

Evaluating insider risk scenarios, high-risk user groups, and crown jewel assets to help clients prioritize and deploy monitoring, detection, response, and program management capabilities

A successful candidate would possess these skills:

Ability to work independently and collaborate as part of a team

Effective written and verbal communication skills

Meticulous attention to detail and quality of work product

Ability to build and sustain professional relationships

Ability to lead projects or workstreams

Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment

Strong interpersonal skills and professional demeanor

Ability to meet deadlines

Ability to mentor and provide clear guidance to others

The team

Deloitte's Cyber team helps complex organizations more confidently pursue their growth, innovation and performance agendas through proactive management of the associated business and cyber risks. Our professionals provide advisory and implementation services that integrate risk, regulatory, and technology skills to help clients transform their legacy programs. We work across a variety of different risk and compliance programs that extend well beyond Cyber Risk. Learn more about Deloitte Advisory's Cyber Risk Services practice.

Qualifications

Required:

6+ years of experience in insider risk, security operations, investigations, compliance, data protection, or enterprise risk management

2+ years of experience managing an insider risk program or conducting insider risk investigations and monitoring insider risk behaviors

Experience using Security Information and Event Management, User and Entity Behavior Analytics, and Data Loss Prevention tools to support insider risk operations

Experience developing insider risk procedures, playbooks, workflows, metrics, or governance models

Experience working with cross-functional stakeholders such as Human Resources, Legal, Privacy, Ethics, or Security

Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

Limited immigration sponsorship may be available.

Preferred:

Bachelor's degree or equivalent experience

Experience in consulting or professional services

Experience responding to and recovering from cybersecurity incidents

Hands-on experience configuring, tuning, and operationalizing UEBA and/or User Activity Monitoring (UAM) platforms to support insider risk detection (e.g., Splunk UEBA, Proofpoint ITM, Microsoft Purview IRM, etc.)

Hands-on experience with at least one Data Loss Prevention solution such as Microsoft Purview, Proofpoint DLP, or Zscaler DLP

One or more of the following certifications: CERT Insider Threat Program Manager Certificate, CERT Insider Threat Analyst, CERT Insider Risk Measure Management Measures of Effectiveness, Certified Information Systems Security Professional, Certified Information Privacy Professional, Certified Information Security Manager, or Certified Information Systems Auditor

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

#CyberCDR27


Education:Bachelor's DegreeEmployment Type:

Apply