1

Security Risk Compliance Jobs in Washington (NOW HIRING)

The Counsel, AI Risk & Compliance serve at the intersection of legal, technology, risk management ... Partner closely with IT, Information Security, Procurement, Marketing and Business Development ...

... security compliance monitoring; security audit management; risk assessment; system authorization; security reporting; and other information security-related tasks. * Identify, evaluate, and develop ...

... security compliance monitoring; security audit management; risk assessment; system authorization; security reporting; and other information security-related tasks. Responsibilities * Identify ...

... security compliance monitoring; security audit management; risk assessment; system authorization; security reporting; and other information security-related tasks. Responsibilities * Identify ...

... security compliance monitoring; security audit management; risk assessment; system authorization; security reporting; and other information security-related tasks. Responsibilities * Identify ...

next page

Showing results 1-20

Security Risk Compliance information

See Washington salary details

$36.8K

$91.9K

$139.9K

How much do security risk compliance jobs pay per year?

As of Jun 28, 2026, the average yearly pay for security risk compliance in Washington is $91,903.00, according to ZipRecruiter salary data. Most workers in this role earn between $68,500.00 and $113,300.00 per year, depending on experience, location, and employer.

What is the difference between Security Risk Compliance vs Security Analyst?

AspectSecurity Risk ComplianceSecurity Analyst
CertificationsISO 27001 Lead Implementer, CISSP, CISACISSP, CompTIA Security+, GIAC Security Certifications
Work EnvironmentPolicy development, compliance audits, risk assessmentsMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government sectors focusing on regulatory adherenceIT departments across various industries focusing on security operations

Security Risk Compliance professionals focus on ensuring organizations meet regulatory standards and manage security risks through policies and audits. Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require security certifications and work within similar environments, their core responsibilities differ: compliance versus active security monitoring.

What are some common challenges faced by Security Risk Compliance professionals when balancing regulatory requirements with business objectives?

Security Risk Compliance professionals often need to navigate the delicate balance between adhering to complex regulatory standards and supporting the organization's operational goals. A major challenge is ensuring compliance without hindering business innovation or efficiency. This involves working closely with various departments to interpret regulations, communicate risks, and implement pragmatic controls that satisfy both legal requirements and business needs. Effective collaboration and ongoing education are key to overcoming these challenges and maintaining a strong security posture.

What are the key skills and qualifications needed to thrive as a Security Risk Compliance professional, and why are they important?

To thrive as a Security Risk Compliance professional, you need a solid understanding of information security frameworks, risk assessment methodologies, and relevant regulations, often supported by a degree in cybersecurity or a related field. Familiarity with tools such as GRC (Governance, Risk, and Compliance) platforms, vulnerability scanners, and certifications like CISSP, CISA, or CRISC is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and collaborate with stakeholders. These skills are vital to ensure organizations meet compliance requirements, mitigate risks, and maintain trust with clients and regulators.

What is Security Risk Compliance?

Security Risk Compliance refers to the process of identifying, assessing, and managing risks to an organization's information systems while ensuring adherence to relevant laws, regulations, and industry standards. Professionals in this field develop policies, conduct risk assessments, and implement controls to protect sensitive data from threats. Their work helps organizations minimize security vulnerabilities and avoid legal or financial consequences related to non-compliance.
What are popular job titles related to Security Risk Compliance jobs in Washington? For Security Risk Compliance jobs in Washington, the most frequently searched job titles are:
Senior Security Risk Management SME

Senior Security Risk Management SME

One Federal Solution

Washington, DC โ€ข Hybrid

Other

Posted 13 days ago


Job description

One Federal Solution provides senior-level cybersecurity risk management expertise supporting A&A, FISMA compliance, IC security standards, continuous monitoring, CDS, and secure cloud/hybrid environments. We apply NIST, CNSSI 1253, and RMF principles to strengthen security posture, automate compliance activities, and deliver risk-based solutions for federal mission needs.

Senior Security Risk Management SME Task and Duties:

  • Provide senior-level security risk management subject matter expertise.
  • Support Authorization and Assessment (A&A), FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud/hybrid engineering.
  • Apply emerging and evolving security risk management practices, including automation of A&A and continuous monitoring activities.
  • Apply NIST 800-series and CNSSI 1253 security controls, risk management framework principles, and related guidance.
  • Advise on secure cloud and hybrid engineering risk posture, compliance, and remediation approaches.

Senior Security Risk Management SME Qualifications:

  • Minimum 10 years of total related experience.
  • Minimum 2 years of recent experience in each of the following: A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud/hybrid engineering.
  • Experience automating A&A and continuous monitoring activities.
  • Experience applying NIST 800-series and CNSSI 1253 security controls and risk management framework guidance.
  • Mandatory certification in CISM, CAP, or GRC Certification in good standing at award and throughout the period of performance, or comparable demonstrable experience.
  • Desired: certifications in AWS, Microsoft Azure, and Microsoft Office 365 cloud platforms.
About One Federal Solution

One Federal Solution (OFS) is an innovative Professional Services provider with over 20 years of experience supporting Defense and Civilian agencies. OFS specializes in Business Intelligence, Acquisition and Procurement, and other Professional Services. We are pioneers, builders, thought leaders, and pride ourselves on thinking outside the box to co-create with our customers, helping them achieve exceptional enterprise-wide outcomes. As a certified Service-Disabled Veteran-Owned Small Business (SDVOSB), OFS is committed to providing high-performance professionals who deliver excellence to our government partners.