Cyber Risk Analyst — Federal Security & Risk (3+ yrs)

General Dynamics Information Technology, Inc.; Ashburn (VA); On-site; USD 94,000 - 118,000; Full time

Benefits offered by this job

Medical plan options

Flexible work weeks

Paid time off

Job summary

General Dynamics Information Technology, Inc. in Ashburn, VA seeks a Cyber Risk Management Analyst to support CBP’s security operations and risk governance. You will assess threats, review security controls, and contribute to risk documentation and remediation tracking across RMF/CSF frameworks.

With 3+ years in cybersecurity or risk management, you’ll collaborate with ISSOs, engineering teams, and leadership to drive timely risk reduction and audit readiness.

Qualifications

• Minimum of three (3) years in cybersecurity or risk management.
• Understanding of NIST frameworks (RMF/CSF) and security control assessments.
• Strong writing and analytical skills for risk documentation.

Responsibilities

• Apply risk frameworks and prepare risk documentation for stakeholders.
• Review system security plans and control implementations against NIST RMF/CSF.
• Assess sufficiency of security controls and recommend remediation strategies.
• Support compliance activities, audits, and documentation packages.
• Develop risk statements, findings, and leadership-ready materials.
• Monitor remediation progress and validate closure artifacts.
• Collaborate with program teams, ISSOs, and engineering groups to gather evidence.
• Standardize risk methodologies and documentation practices across projects.

Skills

Cyber risks

Cybersecurity operations

Cybersecurity risk mgmt

Security controls

Education

Bachelor’s degree in IT/cybersecurity related field

Job description

General Dynamics Information Technology, Inc. in Ashburn, VA seeks a Cyber Risk Management Analyst to support CBP’s security operations and risk governance. You will assess threats, review security controls, and contribute to risk documentation and remediation tracking across RMF/CSF frameworks.

With 3+ years in cybersecurity or risk management, you’ll collaborate with ISSOs, engineering teams, and leadership to drive timely risk reduction and audit readiness.