Junior Cyber Risk & Controls Analyst

General Dynamics Information Technology (GDIT); Ashburn (VA); On-site; USD 85,000 - 116,000; Full time

Job summary

General Dynamics Information Technology (GDIT) is seeking a Cyber Risk Management Analyst (Junior) in Ashburn, VA to support CBP's Cyber Security Directorate. In this role you will assist with documenting risks, evaluating security controls, and coordinating remediation across programs to strengthen nationwide cyber defenses.

The ideal candidate has at least three years of cybersecurity experience, a solid grasp of risk principles, and strong writing skills.

Qualifications

• Three or more years of cybersecurity or IT security experience.
• Foundational understanding of risk principles and assessment practices.
• Strong documentation, organizational, writing and communication capabilities.

Responsibilities

• Assist with documenting risks, gathering supporting information, assessing basic security control effectiveness, and monitoring remediation efforts.
• Supports risk reporting and contributes to applying repeatable risk processes across systems.
• Support the evaluation of technical and administrative security controls to determine effectiveness and identify deficiencies.
• Participate in continuous monitoring activities by assessing new vulnerabilities, configuration changes, or system updates.
• Assist in tracking remediation efforts by validating evidence, collecting updates from system owners, and maintaining accurate records of issue closure.
• Prepare supporting materials for risk summaries, dashboards, and leadership briefings.

Skills

Cyber Risks

Cybersecurity Controls

Cybersecurity Operations

Cybersecurity Risk Management

Education

Bachelor's degree in information technology, computer science, cybersecurity or a related field

Job description

General Dynamics Information Technology (GDIT) is seeking a Cyber Risk Management Analyst (Junior) in Ashburn, VA to support CBP's Cyber Security Directorate. In this role you will assist with documenting risks, evaluating security controls, and coordinating remediation across programs to strengthen nationwide cyber defenses.

The ideal candidate has at least three years of cybersecurity experience, a solid grasp of risk principles, and strong writing skills.