Third Party Risk Manager Jobs in Frederick, MD (NOW HIRING)

X-energy LLC conducts a thorough recruiting process and will never issue offers without interview to discuss qualifications and responsibilities. All applications will be submitted via our company career page, www.x-energy.com/careers/. We will never ask you to provide payment information as part of the recruiting process. If anyone claiming to represent X-energy directs you in a manner otherwise, please contact us at www.x-energy.com/contact-us.

Job Description

This role is responsible for safeguarding the organization's digital assets by monitoring, responding to, and investigating suspected cyber threats and malicious activities across multiple environments. The analyst plays a critical role in evaluating and implementing security tooling solutions, managing third-party risk assessments, and supporting vendor management activities. This position involves triage and data collection to support effective threat response and remediation, while collaborating with cross-functional teams to design and implement robust risk management, security, and governance programs. The analyst conducts software evaluations to ensure selected tools align with organizational security objectives and assists in establishing vendor security standards to ensure compliance with industry standards and regulatory requirements.

Job Profile Tasks/Responsibilities:

• Execute risk management programs through planning, developing, coordinating, and implementing information technology disaster recovery and business continuity planning.
• Perform, assist, and review technical risk assessments and reviews of new and existing applications and systems, networks, servers, including data center physical security and environmental controls.
• Assist in conducting IT audits to ensure information systems security policies and procedures are being implemented as defined in security plans and best practices.
• Perform basic analyses to validate established security requirements and may recommend additional security requirements and safeguards.
• Prepare technical and security reports by collecting, analyzing, and summarizing project information.
• Monitor project progress by tracking activity, resolving problems, publishing progress reports, recommending actions.
• Develop and recommend plans to safeguard computer/server/network configurations and data files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Support and manage information security and risk management awareness and training programs.
• Assist with reviews of special investigations, internal audits, research studies to provide direction and guidance.
• Work with team members to design and oversee server-side elements of network infrastructure, including installing network-wide malware protection software, configuring firewalls, and configuring databases and access on the back end.
• Analyze vulnerability scans of information systems and assist in remediation tasks.
• Maintain professional demeanor and behavior at all times in all forms of communication.
• Perform other duties as assigned by manager.
• Execute the core tasks and responsibilities, listed in the Job Profile Task/Responsibilities section of this document, with minimal supervision.

Job Profile Minimum Qualifications:

• Bachelor's degree in computer science, Information Technology, or a related field.
• Basic understanding of cybersecurity principles and tools.
• Familiarity with networking concepts and security protocols.
• Typically, five years of experience in a Cybersecurity role required.
• Certifications such as CompTIA Security+, CEH, or equivalent.
• Knowledge of SIEM tools and incident response procedures.
• Knowledge of relevant regulations and compliance frameworks (e.g., NIST, ISO 27001).

Job Profile Preferred Qualifications

• Hands-on experience with security platforms including Tenable (vulnerability management), Splunk (SIEM/log analysis), CrowdStrike (endpoint detection and response), and enterprise Governance, Risk, and Compliance (GRC) platforms
• Demonstrated experience in third-party risk management (TPRM), including vendor security assessments, risk scoring, and ongoing monitoring
• Proven track record conducting software evaluations and tool assessments to support security program needs
• Experience with vendor management activities, including security questionnaire review, contract security requirements, and vendor onboarding processes
• Familiarity with vendor risk assessment frameworks and methodologies (e.g., SIG, CAIQ, custom questionnaires)
• Experience managing relationships with third-party vendors and service providers from a security perspective
• Advanced certifications beyond CompTIA Security+ and CEH, such as CISSP, CISM, or vendor-specific certifications (Splunk, CrowdStrike, etc.)
• Experience with security frameworks such as NIST Cybersecurity Framework, ISO 27001, or SOC 2
• Strong analytical and communication skills with the ability to translate technical security findings for business stakeholders

Location:530 Gaither Road, Rockville, MD

Work Site Expectations: Hybrid & Remote Eligible, Travel % increased if remote
Travel Expectations: Up to 10% as needed for project assignment; 25% if remote
Hours:Standard office hours are 8:00am-5:00pm ET, Monday-Friday

Compensation

As required by Maryland and other applicable state law, X Energy, LLC (X-energy) lists the expected compensation range for a publicly advertised job opportunity based upon the job requirements (e.g. education/training, experience, skill sets, etc.). Individual candidates who meet the job requirements for the posted position will be offered a salary within this range based on their respective levels of education/training, experience, and other qualifications unique to them. Salary ranges may vary based on the specific office location and region referenced in the posting to take into consideration differences in cost of living and may not be reflective of all regions. Please note that compensation ranges listed for US job postings reflect base salary only and do not include benefits or other incentives.

Offers within the posted salary range are commensurate with the individual's qualifications for the position, along with a view on internal equity, market data, and room for growth. The salary range for this position is:

$115,000- $140,000

Position Job Classification

Full time - Exempt

Benefits

X Energy, LLC offers a robust benefits package that includes a 401K plan with an employer match, Medical/Dental /Vision Insurance, Life and Disability Insurance, Paid Time Off, and a Tuition Reimbursement/Professional Development policy that supports the continuing education of our employees.

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

X Energy, LLC participates in E-Verify. Please visit the links below for more information about E-Verify and the protection of your Right to Work.

Right To Work Link: If you have the right to work, don't let anyone take it away (e-verify.gov)

E-Verify Participation Link: E-Verify Participation Poster English and Spanish