Junior Cyber Risk Analyst — Defend Critical Systems

gdit; Ashburn (VA); On-site; USD 85,000 - 116,000; Full time

Job summary

GDIT is recruiting for a Cyber Risk Management Junior to support CBP’s Cyber Security Directorate in safeguarding critical government systems. The role involves assisting with risk documentation, control evaluations, and coordination of remediation efforts in a fast-paced security environment.

You will contribute to risk governance, support leadership with briefs, and help apply repeatable risk processes across programs while advancing enterprise cybersecurity objectives.

Qualifications

• Three+ years in cybersecurity or IT security.
• Foundational understanding of risk principles and assessment practices.
• Strong documentation, organizational, writing and communication capabilities.
• Familiarity with risk principles, security control assessment practices, and federal cybersecurity standards.

Responsibilities

• Assist with documenting risks, gathering supporting information, and monitoring remediation efforts.
• Support risk reporting and repeatable risk processes across systems.
• Support evaluation of security controls to determine effectiveness and deficiencies.
• Participate in continuous monitoring by assessing vulnerabilities and system updates.
• Assist in tracking remediation by validating evidence and maintaining records of closure.
• Prepare materials for risk summaries, dashboards, and leadership briefings.

Skills

Cyber Risks

Cybersecurity Controls

Cybersecurity Operations

Cybersecurity Risk Management

Education

Bachelor’s degree in IT / CS / cybersecurity

Job description

GDIT is recruiting for a Cyber Risk Management Junior to support CBP’s Cyber Security Directorate in safeguarding critical government systems. The role involves assisting with risk documentation, control evaluations, and coordination of remediation efforts in a fast-paced security environment.

You will contribute to risk governance, support leadership with briefs, and help apply repeatable risk processes across programs while advancing enterprise cybersecurity objectives.