Junior Cyber Risk Analyst — Protect Critical Systems

VulnU; Ashburn, Northern (VA, KY); Hybrid; USD 85,000 - 116,000; Full time

Benefits offered by this job

Retirement match

Paid parental leave

Job summary

GDIT in Ashburn, VA seeks a Cyber Risk Management Analyst Junior to support CBP Cyber Security Directorate operations, risk documentation, control evaluations, and remediation tracking.

Ideal candidates have 3+ years in cybersecurity, strong written communication, and familiarity with risk principles and cyber standards. Onsite work with potential federal mission impact and growth opportunities.

Qualifications

• Minimum of three (3) years in cybersecurity or IT security experience.
• Foundational understanding of risk principles and assessment practices.
• Strong documentation, organizational, writing and communication capabilities.
• Foundational understanding of risk principles, security control assessment practices, and federal cybersecurity standards.
• Ability to collaborate with technical and non-technical stakeholders.

Responsibilities

• Assist documenting risks, gathering supporting information, and assessing basic security control effectiveness.
• Support risk reporting and repeatable risk processes across systems.
• Evaluate technical and administrative security controls to identify deficiencies.
• Participate in continuous monitoring and vulnerability assessment activities.
• Track remediation efforts and prepare risk summaries and leadership briefings.

Skills

Cyber Risks

Cybersecurity Controls

Cybersecurity Operations

Risk Management

Documentation

Communication

Stakeholder Collaboration

Education

Bachelor’s degree in IT/Cybersecurity

Tools

CRISC

NIST RMF Practitioner

CompTIA Security+

Job description

GDIT in Ashburn, VA seeks a Cyber Risk Management Analyst Junior to support CBP Cyber Security Directorate operations, risk documentation, control evaluations, and remediation tracking.

Ideal candidates have 3+ years in cybersecurity, strong written communication, and familiarity with risk principles and cyber standards. Onsite work with potential federal mission impact and growth opportunities.