Senior GRC (Governance Risk and Compliance)/ Risk Analyst - Washington DC (Remote)

Yakshna Solutions, Inc.; Herndon (VA); Remote; USD 148,500 - 181,500; Full time

Benefits offered by this job

401(k)

Health insurance

Dental insurance

Vision insurance

Life insurance

Short-term disability insurance

Long-term disability insurance

Paid time off

Training and professional development assistance

Job summary

A leading IT solutions provider in Herndon, Virginia, is seeking a Risk Analyst to support cyber risk and compliance activities. The ideal candidate will lead the development of Supply Chain Risk Management and Third-Party Risk Management programs, ensuring effective risk assessment and compliance. Required qualifications include a bachelor’s degree, 8 years of relevant experience, and certifications such as CRISC or CISSP. The role offers a competitive salary of $165K annually, along with comprehensive benefits.

Qualifications

• 8 years of experience in Risk Analysis, Governance, Risk, and Compliance (GRC).
• Experience with FISMA reporting and maturity modeling.
• Required Certifications: CRISC, CISM, CISSP, or CAP.

Responsibilities

• Implement and sustain Integrated Risk Management (IRM) processes.
• Develop Supply Chain Risk Management (SCRM) and Third-Party Risk Management (TPRM) programs.
• Maintain the Cyber Risk Register and track evolving cybersecurity regulations.

Skills

Integrated Risk Management (IRM)

Governance, Risk, and Compliance (GRC)

Cybersecurity metrics

Automation and AI-driven risk analytics

Education

Bachelor's degree in a relative field

Tools

ServiceNow GRC

Archer

eMASS

Xacta

Job description

We strive to attract and retain the brightest people and offer different job experiences with a full range of challenges and rewards.

We help companies realize and implement IT solutions strategically. Yakshna Solutions supports our client’s mission and goals by sharing our know-how, skills and knowledge. We strive to attract and retain the brightest people and offer different job experiences with a full range of challenges and rewards. We take pride in being an equal opportunity employer.

Working with Yakshna gives you the opportunity to develop your knowledge, skills, and abilities. Additionally, you can build a network of peers, mentors and advance your career! We offer exciting opportunities to work with leading industry experts, business consultants and IT specialists across large government and private sector companies. The people who work in Yakshna are as diverse as our services. We recognize the crucial importance of each individual to our success and offer competitive compensation, comprehensive benefits and innovative training.

Opportunities here exist across many services and across many US states. Don’t forget to refer your friends to earn cash for qualified referrals! Based on your relevant profile and our current requirements, our recruitment team will contact you as soon as possible.

Open Jobs

Feb 03 2026

Yakshna Solutions, Inc ., (YSI) is a CMMI Level 3 assessed, ISO 9001, 20000:1, 27001 certified, woman-owned small business enterprises, headquartered in Herndon, Virginia, USA. YSI provides professional IT solutions and services to business corporations and government organizations. YSI is committed to serve its business communities as a leading IT vendor providing innovative, quality, and cost-effective IT business solutions and services.

YSI offers a competitive benefits package that includes the following: 401(k), health, dental, and vision insurance, Life insurance, short-term and long-term disability insurance, paid time off, training and professional development assistance.

YSI is seeking a Risk Analyst. The ideal candidate will be responsible for the following:

Supports enterprise cyber risk and compliance activities by implementing and sustaining Integrated Risk Management (IRM) processes aligned with federal mandates. Leads development and maturation of Supply Chain Risk Management (SCRM) and Third-Party Risk Management (TPRM) programs, ensuring consistent risk identification, assessment, and reporting across vendors and partners.

Maintains the Cyber Risk Register, tracks evolving cybersecurity regulations and data calls, and supports continuous improvement of FISMA scores and maturity levels. Normalizes and translates technical cyber risks into business‑relevant terms to enable enterprise-wide risk visibility and executive decision‑making. Develops cybersecurity dashboards and leverages automation and AI to enhance risk reporting, compliance tracking, performance analysis, and forward‑looking risk forecasting.

Required skills and experience

• Bachelor's degree in relative field.
• 8 years of experience in Risk Analysis, Governance, Risk, and Compliance (GRC).
• Integrated Risk Management (IRM), Cyber Risk Register, Supply Chain Risk Management (SCRM), Third-Party Risk Management (TPRM).
• FISMA reporting and maturity modeling.
• NIST Risk Management Framework (RMF), Risk normalization and enterprise risk translation.
• Cybersecurity metrics, KPIs, and dashboards.
• Regulatory compliance tracking and data calls, GRC platforms (e.g., ServiceNow GRC, Archer, eMASS, Xacta), Automation and AI‑driven risk analytics, Continuous monitoring and compliance reporting.
• Required Certifications: CRISC, CISM, CISSP, or CAP

Salary: $165K/A with benefits

W-2 Only

YSI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.