Cyber Risk Management Analyst (Mid-Level) - RMF/NIST Focus

General Dynamics Information Technology (GDIT); Ashburn (VA); On-site; USD 94,000 - 118,000; Full time

Benefits offered by this job

Total rewards package

Job summary

General Dynamics Information Technology (GDIT) supports the CBP Cyber Security Directorate in protecting critical government networks. The Cyber Risk Management Analyst role drives risk assessments, security control reviews, and governance across programs, fostering collaboration among ISSOs, engineers, and leadership.

The position emphasizes risk communication, remediation tracking, and documentation quality to strengthen enterprise cyber resilience within a fast-paced federal environment.

Qualifications

• Minimum of three (3) years in cybersecurity or risk management.
• Understanding of NIST frameworks and security control assessments.
• Solid analytical and writing skills.
• Strong communication and collaboration across teams.
• Preferred certifications: CRISC, NIST RMF Practitioner.

Responsibilities

• Contribute to applying risk frameworks, assess threats, and prepare clear risk documentation.
• Review system security plans, policies, and control implementations for RMF/CSF adherence.
• Assess sufficiency of security controls and recommend remediation strategies.
• Contribute to compliance activities, audits, and documentation packages.
• Develop risk statements, findings summaries, and decision-support materials for diverse audiences.
• Monitor remediation progress and validate closure artifacts in the risk lifecycle.
• Assist with risk registers, dashboards, and reporting tools for leadership awareness.
• Collaborate with program teams, system owners, ISSOs, and engineering groups to gather evidence and resolve issues.

Skills

Cyber risks

Cybersecurity operations

Cybersecurity risk management

Security controls

Education

Bachelor’s degree in IT/CS/cybersecurity

Job description

General Dynamics Information Technology (GDIT) supports the CBP Cyber Security Directorate in protecting critical government networks. The Cyber Risk Management Analyst role drives risk assessments, security control reviews, and governance across programs, fostering collaboration among ISSOs, engineers, and leadership.

The position emphasizes risk communication, remediation tracking, and documentation quality to strengthen enterprise cyber resilience within a fast-paced federal environment.