Cyber Risk Management Specialist

Anakim Consulting; Ashburn (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Anakim Consulting is expanding its cybersecurity team to support a large federal agency in Ashburn. The Cyber Risk Management Specialist will lead risk assessments, apply RMF, and translate complex risk data into actionable insights for leaders.

We seek professionals with relevant certifications and degrees, comfortable working on-site in Ashburn, VA, and capable of developing risk frameworks and executive dashboards to guide risk-informed decisions.

Qualifications

• Bachelor's or Master's in Cybersecurity, Risk Management, Information Technology, or related field.
• Certifications: CRISC, CISM, CISSP, CGEIT, PMI-RMP; junior CRISC accepted.
• U.S. citizenship and DHS CBP suitability or eligibility for secure access (EOD).
• On-site availability in Ashburn, VA.

Responsibilities

• Risk Assessment and Analysis: Perform comprehensive cyber risk assessments and quantify risks across systems.
• Framework Implementation: Apply RMF, policies, methodologies, and risk registers.
• Mitigation and Tracking: Evaluate control efficacy and track remediation efforts.
• Reporting and Governance: Create executive dashboards and briefings to guide decisions.
• Cross-functional Collaboration: Coordinate with engineering, compliance, and leadership teams.

Skills

Cybersecurity

Risk assessment

RMF

Executive reporting

Education

Bachelor's/Master's in Cybersecurity

Job description

Job Title

Cyber Risk Management Specialist

This position is currently accepting applications.

Equal Employment Opportunity

Anakim Consulting provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

Location

Ashburn, VA 20147

Location: 100% On-Site

Availability to work on-site in Ashburn

Security Clearance

DHS Suitability Public Trust

Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD

Position Overview

Anakim Consulting is expanding our team supporting a large federal agency. Our Cyber Risk Management Specialists lead and execute enterprise cybersecurity risk management activities. These roles are responsible for evaluating threat environments, performing risk assessments, analyzing technical and operational controls, and aligning organizational posture with risk management frameworks. Higher-level roles drive strategic enterprise risk initiatives, establish governance methodologies, and provide executive risk reporting.

Key Responsibilities

• Risk Assessment and Analysis: Perform comprehensive cyber risk assessments, analyze threat/vulnerability landscapes, and quantify security risks across systems and programs.
• Framework Implementation: Apply and maintain enterprise Risk Management Frameworks (RMF), policies, methodologies, and risk registers.
• Mitigation and Tracking: Evaluate control efficacy, formulate risk mitigation strategies, and track remediation efforts across organizational units.
• Reporting and Governance: Synthesize technical risk data into executive dashboards, briefings, and strategic reports to guide organizational decision-making.
• Cross-functional Collaboration: Partner with system engineering, compliance and leadership teams to ensure risk-informed architectural and operational decisions.

Position Requirements

• U.S. citizenship, no dual citizenship
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD
• Availability to work on-site in Ashburn
• Education: Bachelor's or Master's degree in Cybersecurity, Risk Management, Information Technology, or related discipline
• Certifications: Junior: CompTIA Security+, CRISC (associate); Mid/Senior/Lead: CRISC, CISM, CISSP, CGEIT, PMI-RMP

Specialized experience and core responsibilities vary by role and level of experience:

Specialized experience and core responsibilities vary by role and level of experience:

Junior Specialist (1-3 years)

• Supports risk identification, control evaluations, and risk register maintenance.
• Assists in gathering threat data and documenting risk assessment findings.
• Tracks assigned risk mitigation tasks.

Mid-Level Specialist (4-6 years)

• Conducts independent cyber risk assessments for enterprise systems and projects.
• Evaluates threat vectors, designs risk mitigation plans, and analyzes control gaps.
• Contributes to the refinement of risk methodologies and metrics.

Senior Specialist (7-10 years)

• Leads high-impact enterprise risk assessments and complex threat modeling efforts.
• Develops risk reporting frameworks and delivers briefings to senior management.
• Mentors junior analysts and drives enterprise-wide risk strategy alignment.

Lead Specialist (8+ years)

• Directs the overall enterprise cyber risk assessment and management program.
• Establishes risk governance policies, methodologies, and operational standards.
• Serves as the primary risk advisor to executive leadership and oversees risk team operations.

#CyberRisk #CyberRiskManagement #GRC #CyberSecurityJobs #Hiring #NIST #RMF #RiskAssessment #CRISC #CyberJobs #NowHiring #InfoSec

Contract Type

Full-Time

Salary Range

This position offers a full-time W2 salary plus eligibility to participate in the company's benefits program.

Req Number

INF-26-00038

About the Organization

Anakim Consulting is a privately held small company that provides growth opportunities for employees. Come join our team!