Cyber Risk Management Analyst Mid-Level

Job Description

• Mid-level, onsite Cyber Risk Management Analyst role with General Dynamics Information Technology in Ashburn, VA, supporting U.S. Customs and Border Protection’s federal cybersecurity and national security mission.
• Assess cyber risks and security controls, review system security plans and control implementations against NIST RMF/CSF frameworks, and recommend remediation or mitigation strategies.
• Produce risk statements, findings summaries, decision-support materials, risk registers, dashboards, compliance documentation, audit-preparation packages, and stakeholder risk reporting.
• Monitor remediation progress, validate closure artifacts and control improvements, collaborate with system owners, ISSOs, program teams, and engineers, and standardize risk methodologies.
• Requires U.S. citizenship, at least 3 years of cybersecurity or risk management experience, BI Full 6C (T4) public trust requirement, and a preferred bachelor’s degree; preferred certifications include CompTIA Security+, CRISC, and NIST RMF Practitioner.
• Full-time, 40 hours/week, less than 10% travel; salary range is $93,662–$117,875.