1

Technology Risk Management Internship Jobs in Fairfax, VA

The ideal candidate will possess a solid understanding and hands-on experience of risk management frameworks (such as NIST 800-53, NIST CSF), technology functions, and organizational structures.

Support critical third-party vendor risk management activities * Develop, enhance, and maintain critical technology solutions to support corporate-wide AI adoptions * Execute risk mitigant processes ...

Support critical third-party vendor risk management activities * Develop, enhance, and maintain critical technology solutions to support corporate-wide AI adoptions * Execute risk mitigant processes ...

next page

Showing results 1-20

Technology Risk Management Internship information

See Fairfax, VA salary details

$13

$25

$39

How much do technology risk management internship jobs pay per hour?

As of Aug 8, 2026, the average hourly pay for technology risk management internship in Fairfax, VA is $25.98, according to ZipRecruiter salary data. Most workers in this role earn between $21.15 and $29.47 per hour, depending on experience, location, and employer.

What types of projects or tasks can I expect to work on during a technology risk management internship?

As a Technology Risk Management Intern, you'll typically assist with identifying, assessing, and documenting technology-related risks within the organization. Your tasks may include supporting risk assessments, helping to evaluate security controls, preparing reports for stakeholders, and participating in audits or compliance reviews. You'll likely collaborate closely with IT, cybersecurity, and compliance teams to understand risk management frameworks and learn best practices for mitigating technology risks. This hands-on experience is valuable for building a foundation in risk analysis and developing skills relevant to future roles in technology governance or information security.

What are the key skills and qualifications needed to thrive as a technology risk management intern, and why are they important?

To excel as a Technology Risk Management Intern, you need a basic understanding of information technology concepts, risk assessment, and cybersecurity principles, often supported by coursework in IT, business, or related fields. Familiarity with risk management frameworks, data analysis tools, and platforms like Excel, GRC systems, or security software is commonly required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills that help interns collaborate and clearly present risk findings. These competencies are vital for identifying, assessing, and mitigating technology risks, thereby supporting organizational security and compliance.

What is the difference between Technology Risk Management Internship vs Cybersecurity Analyst Internship?

AspectTechnology Risk Management InternshipCybersecurity Analyst Internship
Required CredentialsRelevant coursework, basic certifications (e.g., CompTIA Security+)Similar certifications, technical skills in security tools
Work EnvironmentRisk assessment, compliance, policy development in financial/tech firmsSecurity monitoring, incident response in IT/security teams
Employer & Industry UsageFinancial institutions, tech companies focusing on risk mitigationIT departments, cybersecurity firms, tech companies

Technology Risk Management Internships focus on assessing and managing technology-related risks, compliance, and policies, while Cybersecurity Analyst Internships concentrate on protecting systems from security threats. Both roles often overlap in skills and industry settings but differ in core responsibilities.

What is a technology risk management internship?

A Technology Risk Management Internship is a temporary, entry-level position where students or recent graduates assist organizations in identifying, assessing, and mitigating risks related to their technology systems and data. Interns typically work with experienced risk managers to analyze IT processes, ensure compliance with security policies, and help implement risk controls. This internship provides hands-on experience in cybersecurity, regulatory compliance, and risk analysis within a business or financial environment. It is a valuable opportunity for those interested in pursuing careers in information security, IT audit, or risk management.
Infographic showing various Technology Risk Management Internship job openings in Fairfax, VA as of August 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $54,039 per year, or $26 per hour.

Director, Cybersecurity and IT Risk Management

SourceAmerica

Vienna, VA โ€ข On-site

$170K - $180K/yr

Full-time

Medical, Dental, Vision, Retirement, PTO

Posted 4 days ago


Job description

About SourceAmerica

SourceAmerica is a mission-driven nonprofit and AbilityOne-authorized enterprise that helps create employment opportunities for people with disabilities by building strong partnerships with the federal government and a nationwide network of nonprofit agencies. We connect federal customers with high-quality products and services while strengthening the capabilities of nonprofit agencies and the people they employ. More information can be found at www.SourceAmerica.org/who-we-are

About the Role

We are seeking a Director, Cybersecurity and IT Risk Management to provide strategic leadership and operational oversight for SourceAmerica’s cybersecurity, technology risk management, security governance, incident response, third-party risk management, security awareness, and compliance readiness programs. This leader will serve as a trusted advisor to IT leadership, executive leadership, business stakeholders, governance bodies, and partners on cybersecurity risk, regulatory and contractual obligations, cyber resilience, and secure technology enablement.

This is a high-impact leadership opportunity for a cybersecurity executive who can balance mission, risk, compliance, and business enablement in a federal-contracting and nonprofit environment. The Director will help protect SourceAmerica’s information assets, systems, mission, and federal contracting obligations while also supporting nonprofit agency partners where federal contracts, Controlled Unclassified Information, or technology risk obligations apply.

SourceAmerica offers both a hybrid and remote work model. **Due to the requirements of this position, the ideal candidate would live within 30 commuting miles or less of the SourceAmerica's National Office in Vienna, VA and work 2-3 days per week in the office.

What You’ll Do

  • Lead SourceAmerica’s cybersecurity, technology risk management, and security governance functions.
  • Develop and execute the enterprise cybersecurity strategy and roadmap aligned to organizational goals, federal contractor obligations, AbilityOne operational responsibilities, and risk tolerance.
  • Own the cybersecurity risk management framework, including risk assessment methodology, risk register, mitigation tracking, accepted risk documentation, and executive-level reporting.
  • Lead readiness and ongoing compliance activities for CMMC, NIST SP 800-171, Controlled Unclassified Information protection requirements, GSA CUI handling requirements, and other applicable federal, contractual, and regulatory security obligations.
  • Oversee security operations, including threat monitoring, vulnerability management, incident response, threat mitigation, control validation, and user awareness training.
  • Lead cybersecurity incident response activities, including investigation, containment, recovery, executive communication, lessons learned, and remediation tracking.
  • Build and lead cybersecurity components of third-party risk management, including vendor risk tiering, due diligence, contract security requirements, cloud/SaaS assessments, ongoing monitoring, and remediation tracking.
  • Provide security oversight for enterprise systems, cloud platforms, data platforms, artificial intelligence solutions, automation, and major technology initiatives.
  • Support AI governance by assessing cybersecurity, privacy, data protection, vendor, and operational risks associated with approved and emerging AI tools.
  • Present cybersecurity metrics, risk posture, control effectiveness, incident trends, vulnerability remediation, compliance readiness, and security program maturity to inform executive decision-making.

Salary Range

The salary for this position falls in a range between $170,000 - $180,000 depending on your experience and geographic location in the United States.

What You Bring

  • Bachelor’s degree required; master’s degree, MBA, or relevant advanced training preferred.
  • 15+ years of relevant cybersecurity, technology risk, security governance, or compliance experience.
  • 10+ years of management experience, with demonstrated ability to lead staff, vendors, managed security service providers, and cross-functional partners.
  • Current CISSP, CISM, CRISC, CISA, CGRC, or equivalent cybersecurity, risk, or compliance certification.
  • Strong knowledge of cybersecurity technologies, security operations, technology risk management, security governance, and regulatory compliance practices.
  • Working knowledge of NIST SP 800-171, CMMC, NIST Cybersecurity Framework, Controlled Unclassified Information requirements, and federal contractor cybersecurity expectations.
  • Experience interpreting federal contract cybersecurity and CUI requirements and translating them into practical guidance for business, technology, vendor, and partner audiences.
  • Experience communicating cybersecurity risk, compliance readiness, incident response matters, and mitigation priorities to executive and non-technical stakeholders.
  • Ability to work independently, solve complex problems under time pressure, build relationships across a national organization, and support a mission-driven culture.

Preferred Qualifications

  • Experience leading cybersecurity programs within federal contractors, government organizations, regulated industries, or mission-driven nonprofit organizations.
  • Experience supporting CMMC certification efforts, NIST SP 800-171 compliance programs, and CUI protection initiatives.
  • Experience supporting cloud-first and SaaS-centric environments, including Microsoft 365, Azure, Dynamics 365, and related Microsoft security technologies.
  • Experience leading third-party risk management programs, vendor security assessments, contract security reviews, and supply chain risk management initiatives.
  • Experience developing cybersecurity strategy, governance structures, executive reporting, risk registers, security metrics, and policy frameworks.
  • Experience presenting cybersecurity and technology risk matters to executive leadership, governance councils, audit committees, or boards.

Work Environment

Our organization offers both a hybrid work model—where employees work in our office two to three days per week and work from home the balance of the workweek—as well as a fully remote work model, depending on the job requirements. *Due to the requirements of this position, the ideal candidate would live within 30 commuting miles or less of the SourceAmerica's National Office in Vienna, VA and work 2-3 days per week in the office.

Employee Benefits

We offer a comprehensive employee benefits package that includes paid holidays, vacation time, sick leave, medical, dental, and vision insurance, a solid retirement plan, and more!

Accessibility Support

We’re committed to offering reasonable accommodation to job applicants with disabilities. If you need assistance or accommodation due to disability, please contact us at Human Resources (888) 411-8424 or hr@sourceamerica.org.

Equal Opportunity Employment

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. View our EEO Policy https://www.sourceamerica.org/sites/default/files/2022-01/eeo-policy.pdf.