ZipRecruiter

Log In

1

Security Risk Management Jobs in Maryland (NOW HIRING)

TEKsystems

Security Analyst

Columbia, MD · Hybrid

$55 - $60/hr

Description Position Overview The Information Security Analyst II (GRC) provides support for ... risk management activities • Execute and oversee the third-party risk management process • ...

TEKsystems

Security Analyst

Columbia, MD · Hybrid

$55 - $60/hr

Description Position Overview The Information Security Analyst II (GRC) provides support for ... risk management activities • Execute and oversee the third-party risk management process • ...

BOOZ, ALLEN & HAMILTON, INC.

$62K - $141K/yr

As an information security risk specialist on our team, you'll work with industry partners to ... Experience in cybersecurity risk assessments and supply chain or risk management efforts

CIBC

$130K - $155K/yr

Risk Management: Conduct risk-based assessments for new and existing cloud and network solutions, identify vulnerabilities, and recommend mitigation strategies. * Security Service Management: Build ...

CIBC US

$130K - $155K/yr

Risk Management: Conduct risk-based assessments for new and existing cloud and network solutions, identify vulnerabilities, and recommend mitigation strategies. * Security Service Management: Build ...

Metrea

Program Security Manager

Annapolis, MD · On-site

$127K - $155K/yr

Support planning and execution of sensitive activities by integrating counter-intelligence, operational security, risk mitigation, and collection management considerations * Develop and maintain risk ...

previous page

Showing results 41-60

All JobsSecurity Risk Management JobsSecurity Risk Management Jobs in Maryland

Security Risk Management information

See Maryland salary details

$10

$48

$67

How much do security risk management jobs pay per hour?

As of Aug 29, 2026, the average hourly pay for security risk management in Maryland is $48.92, according to ZipRecruiter salary data. Most workers in this role earn between $39.66 and $58.32 per hour, depending on experience, location, and employer.

What is security risk management?

Security Risk Management is the process of identifying, assessing, and mitigating risks to an organization's information, assets, and operations. It involves evaluating potential threats and vulnerabilities, determining their potential impact, and implementing strategies to minimize or control these risks. The goal is to protect the organization from security breaches, data loss, and other threats while ensuring compliance with legal and regulatory requirements. Security Risk Management is essential for maintaining business continuity and safeguarding reputation.

What are the key skills and qualifications needed to thrive in security risk management, and why are they important?

To excel in Security Risk Management, you need a solid understanding of risk assessment frameworks, cybersecurity principles, and compliance standards, often supported by a degree in information security or related fields. Familiarity with risk management tools, security incident response systems, and certifications such as CISSP or CISM is typically required. Strong analytical thinking, communication, and decision-making skills help professionals navigate complex threats and collaborate across departments. These competencies are crucial for effectively identifying, mitigating, and communicating risks to protect organizational assets and ensure regulatory compliance.

What are the typical challenges faced by professionals in security risk management, and how can they be addressed?

Professionals in Security Risk Management often encounter challenges such as rapidly evolving threats, balancing security with business operations, and ensuring organization-wide compliance with regulations. Staying current with the latest risk trends and fostering cross-department collaboration are key strategies for overcoming these obstacles. Additionally, clear communication of risks to non-technical stakeholders and ongoing training are essential for building a proactive security culture and effective risk mitigation.

What is the difference between Security Risk Management vs Security Analyst?

AspectSecurity Risk ManagementSecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentStrategic, policy-focused, risk assessmentOperational, monitoring, incident response
Employer & Industry UsageOrganizations managing enterprise security risksSecurity teams, cybersecurity firms, IT departments

Security Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy development and strategic planning. In contrast, Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. Both roles are essential but differ in scope and responsibilities within the cybersecurity field.

What do you need to be a security risk manager?

A security risk manager typically needs a bachelor's degree in security management, information technology, or a related field, along with experience in security or risk assessment. Certifications such as Certified Information Systems Security Professional (CISSP) or Certified Risk and Information Systems Control (CRISC) can enhance qualifications. Strong analytical skills, knowledge of security protocols, and familiarity with risk management tools are also important for the role.

What does security risk management do?

Security risk management involves identifying, assessing, and prioritizing potential security threats to an organization, then implementing measures to mitigate or eliminate those risks. Professionals in this field analyze vulnerabilities, develop security policies, and often use tools like risk assessment frameworks and security audits to protect assets and ensure safety.

What are popular job titles related to Security Risk Management jobs in Maryland?

For Security Risk Management jobs in Maryland, the most frequently searched job titles are:

What job categories do people searching Security Risk Management jobs in Maryland look for?

The top searched job categories for Security Risk Management jobs in Maryland are:

Security Risk Management jobs near you
Infographic showing various Security Risk Management job openings in Maryland as of August 2026, with employment types broken down into 1% As Needed, 82% Full Time, 15% Part Time, and 2% Contract. Highlights an 84% Physical, 2% Hybrid, and 14% Remote job distribution, with an average salary of $101,759 per year, or $48.9 per hour.

Information Systems Security Manager

Modern Technology Solutions, Inc. (MTSI)

Patuxent River, MD • On-site

Full-time

This job post has expired 1 day ago. Applications are no longer accepted.

Job description

Job Summary:
Modern Technology Solutions, Inc. (MTSI) is seeking an experienced Information Systems Security Manager (ISSM) to lead cybersecurity efforts in a Navy-centric software development environment. The ISSM will manage the security posture of information systems, ensuring compliance with DoD standards and the Risk Management Framework (RMF), while potentially growing a small cybersecurity team.
Responsibilities:
• Lead cybersecurity efforts for a Navy-centric software development environment focused on novel software applications.
• Manage and oversee the security posture of information systems, ensuring compliance with DoD standards and the Risk Management Framework (RMF).
• Work across multidisciplinary teams to maintain the confidentiality, integrity, and availability of the program's critical systems and data.
• Support onsite operating independently with the potential to grow a small team for scaling cybersecurity capabilities.
Qualifications:
Required:
• 8+ years of combined experience working in defensive/offensive cybersecurity, information assurance, penetration testing, software engineering, or related field.
• Knowledge of the Department of Navy and Naval Air Systems Command (NAVAIR), to include digital infrastructure/environments, DevSecOps, Continuous Integration/Continuous Development (CI/CD), software factories, cloud-native containerized applications, Risk Management Framework (RMF), continuous Authority to Operate (cATO).
• Proven experience in designing, implementing, and maintaining multi-level security architectures across cloud, infrastructure, and platform applications.
• Deep proficiency in configuring and managing industry-standard security tools, including firewalls, intrusion detection systems (IDS).
• Strong background in DevSecOps, with the ability to integrate and automate cybersecurity within CI/CD pipelines.
• Hands-on experience with security monitoring, log analysis, threat intelligence, and digital forensics to identify and respond to system anomalies.
• Expert knowledge of the Risk Management Framework (RMF) and Department of War (DoW) cybersecurity directives, including system categorization and continuous monitoring.
• Demonstrated ability to lead the full Authorization to Operate (ATO) lifecycle and manage System Security Plans (SSPs) in accordance with federal regulations.
• Extensive experience conducting security risk assessments, penetration testing, and compliance audits.
• Skilled in developing and enforcing organizational security standards, policies, and procedural documentation.
• Ability to serve as a primary cybersecurity advisor to senior leadership, engineering teams, and external stakeholders.
• Proven leadership in mentoring information security teams and coordinating cybersecurity requirements with external agencies and vendors.
• Strategic thinker capable of analyzing emerging threat vectors and adjusting security measures to maintain a robust security posture.
• Strong communication skills, with experience preparing and delivering high-level briefings and metrics on cyber readiness to key stakeholders.
• Experience with cloud security (e.g. AWS, Azure GCP).
• Familiarity with DevSecOps/Platforms such as AWS (S3, RDS, EC2, ECS, Lambda, SQS, SNS, CloudFormation, etc.), Azure (Azure App Service, Azure Functions, Azure Storage, Azure SQL Database, etc.), Docker, Ansible and experience with DevSecOps tools such as GitHub and Jenkins.
• Experience with on-premise compute infrastructure and networks.
• Experience in Agile development methodologies.
• Experience with defending against known attack vectors.
• In-depth knowledge of security frameworks, standards, and guides (e.g. RMF, NIST, CIS, STIGs, FIPS, etc.).
• BS in Computer-Science field.
• IAM level 2- CISSP, CASP CE+, CGRC, or CISM.
• Must possess a Top Secret clearance with SCI/SAP eligibility.
Preferred:
• Data Operations (DataOps), Artificial Intelligence / Machine Learning Operations (AI/MLOps)
• Experience supporting electronic warfare systems.
• Familiarity with software development and DevSecOps integration.
• Awareness of aviation platforms and weapon systems.
• Experience with Multi-Level Security (MLS) or Cross Domain Solutions (CDS).
• MS in Computer-Science or Cybersecurity field.
Company:
Modern Technology Solutions, Inc. Founded in 1993, the company is headquartered in Alexandria, USA, with a team of 1001-5000 employees. The company is currently Late Stage.

Apply