Cyber Risk Management Specialist

Appone; Ashburn (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Anakim Consulting is expanding its team supporting a large federal agency. Our Cyber Risk Management Specialists lead enterprise cybersecurity risk management activities, evaluating threat environments, performing risk assessments, and aligning organizational posture with RMF frameworks.

Higher-level roles drive strategic enterprise risk initiatives, establish governance methodologies, and provide executive risk reporting.

Qualifications

• U.S. citizenship, no dual citizenship.
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD.
• Availability to work on-site in Ashburn.

Responsibilities

• Risk assessment and analysis of enterprise systems and programs.
• Apply and maintain enterprise RMF, policies, methodologies, and risk registers.
• Evaluate control efficacy and track remediation across units.
• Prepare executive risk dashboards and briefings for leadership.
• Collaborate with engineering, compliance, and leadership to ensure risk-informed decisions.

Job description

EOE Statement Anakim Consulting provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

Cyber Risk Management Specialist

Ashburn, VA 20147

Location: 100% On-Site
Security: DHS Suitability Public Trust

Multiple Openings!

Position Overview

Anakim Consulting is expanding our team supporting a large federal agency. Our Cyber Risk Management Specialists lead and execute enterprise cybersecurity risk management activities. These roles are responsible for evaluating threat environments, performing risk assessments, analyzing technical and operational controls, and aligning organizational posture with risk management frameworks. Higher-level roles drive strategic enterprise risk initiatives, establish governance methodologies, and provide executive risk reporting.

Key Responsibilities

• Risk Assessment and Analysis: Perform comprehensive cyber risk assessments, analyze threat/vulnerability landscapes, and quantify security risks across systems and programs.
• Framework Implementation: Apply and maintain enterprise Risk Management Frameworks (RMF), policies, methodologies, and risk registers.
• Mitigation and Tracking: Evaluate control efficacy, formulate risk mitigation strategies, and track remediation efforts across organizational units.
• Reporting and Governance: Synthesize technical risk data into executive dashboards, briefings, and strategic reports to guide organizational decision-making.
• Cross-Functional Collaboration: Partner with system engineering, compliance, and leadership teams to ensure risk-informed architectural and operational decisions.

Position Requirements

• U.S. citizenship, no dual citizenship
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD
• Availability to work on-site in Ashburn
• Education: Bachelor’s or Master’s degree in Cybersecurity, Risk Management, Information Technology, or related discipline
• Certifications:
  • Junior: CompTIA Security+, CRISC (associate)
  • Mid/Senior/Lead: CRISC, CISM, CISSP, CGEIT, PMI-RMP

Specialized experience and core responsibilities vary by role and level of experience:

Junior Specialist (1–3 years)

• Supports risk identification, control evaluations, and risk register maintenance.
• Assists in gathering threat data and documenting risk assessment findings.
• Tracks assigned risk mitigation tasks.

Mid-Level Specialist (4–6 years)

• Conducts independent cyber risk assessments for enterprise systems and projects.
• Evaluates threat vectors, designs risk mitigation plans, and analyzes control gaps.
• Contributes to the refinement of risk methodologies and metrics.

Senior Specialist (7–10 years)

• Leads high-impact enterprise risk assessments and complex threat modeling efforts.
• Develops risk reporting frameworks and delivers briefings to senior management.
• Mentors junior analysts and drives enterprise-wide risk strategy alignment.

Lead Specialist (8+ years)

• Directs the overall enterprise cyber risk assessment and management program.
• Establishes risk governance policies, methodologies, and operational standards.
• Serves as the primary risk advisor to executive leadership and oversees risk team operations.

#CyberRisk #CyberRiskManagement #GRC #CyberSecurityJobs #Hiring #NIST #RMF #RiskAssessment #CRISC #CyberJobs #NowHiring #InfoSec

Full-Time/Part-Time Full-Time

Salary Range This position offers a full-time W2 salary plus eligibility to participate in the company's benefits program.

Req Number INF-26-00038

About the Organization Anakim Consulting is a privately held small company that provides growth opportunities for employees. Come join our team!

This position is currently accepting applications.