Cyber Risk Management Analyst — Mission-Critical Security

gdit; Ashburn (VA); On-site; USD 94,000 - 118,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Flexible work options

Job summary

GDIT is seeking a Cyber Risk Management Analyst to join a mission-critical CBP cyber program in Ashburn, VA. The role focuses on assessing cyber risks, evaluating controls, and supporting enterprise governance across RMF/CSF frameworks.

You will collaborate with ISSOs, engineers, and program teams to drive risk-informed decisions. The position requires 3+ years in cybersecurity or risk management, strong writing skills, and familiarity with NIST frameworks.

Qualifications

• Minimum of three (3) years in cybersecurity or risk management.
• Understanding of NIST frameworks and security control assessments.
• Strong writing and analytical skills.
• Ability to work across diverse technical teams.

Responsibilities

• Contribute to risk framework implementation and produce actionable risk documentation.
• Review system security plans, policies, and control implementations for RMF/CSF alignment.
• Assess existing controls and recommend remediation or mitigation strategies.
• Support compliance activities, audits, and documentation packages.
• Develop risk statements and leadership-friendly findings summaries.

Skills

Cyber Risks

Cybersecurity Operations

Cybersecurity Risk Management

Security Controls

Education

Bachelor’s degree in information technology, computer science, cybersecurity or a related field

Job description

GDIT is seeking a Cyber Risk Management Analyst to join a mission-critical CBP cyber program in Ashburn, VA. The role focuses on assessing cyber risks, evaluating controls, and supporting enterprise governance across RMF/CSF frameworks.

You will collaborate with ISSOs, engineers, and program teams to drive risk-informed decisions. The position requires 3+ years in cybersecurity or risk management, strong writing skills, and familiarity with NIST frameworks.