16 information security risk analyst jobs at 13 companies in Virginia

2w
Save
Mark Applied
Hide
Information Security Analyst (Risk & Compliance)
Richmond, Virginia, United States
$70k-$100k/yr OnsiteFull Time
Performance Food Group
Performance Food GroupNYSE: PFGC: Distributes food and related products to the foodservice industry.
1+ YOEBachelor's degree and 1–3 years of experience required; security risk assessments, regulatory frameworks, security controls, privacy statutes, business impact analysis, Microsoft Azure Information Protection, and strong MS Office skills.
Microsoft Azure Information Protection, Microsoft PowerPoint, Microsoft Word, Microsoft Excel, Microsoft Project, Microsoft Visio, SaaS, PaaS, IaaS, Cloud Security Alliance, Service Organization Controls (SOC), CobIT, GDPR, CCPA, HIPAA, PCI DSS
1mo
Save
Mark Applied
Hide
Information Assurance Analyst
Virginia, United States
$75k-$100k/yr OnsiteFull Time
KCG Engineering Group
KCG Engineering Group: Provide specialized engineering and program support to government agencies.
1+ YOETS/SCI with current SSBI, Bachelor\u0002s in related field, 1+ year performing Navy IA/cybersecurity functions, acceptable security certifications, RMF and eMASS experience, vulnerability/risk analysis skills.
eMASS
1d
Save
Mark Applied
Hide
Principal Technical Risk Analyst
Vienna, Virginia, United States
$150k-$206k/yr HybridFull Time
Navy Federal Credit Union
Navy Federal Credit Union: Offers banking and financial services to the military community.
5+ YOERequires a bachelor's or master's degree or equivalent experience, significant risk assessment and information security experience, Lines of Defense expertise, stakeholder leadership, risk-control knowledge, and Lean Six Sigma experience.
Lean Six Sigma
2mo
Save
Mark Applied
Hide
Security Analyst
Charlottesville, Virginia, United States
HybridFull Time
Networking Technologies + Support
Networking Technologies + Support: Provider of managed IT, cybersecurity, and networking services.
Experience with security controls, risk assessment, and regulatory compliance (HIPAA, NIH, NIST); ability to pass drug screen and background check; valid driver's license and reliable transportation; able to work onsite in Charlottesville, VA as required.
HIPAA, NIH, NIST
1w
Save
Mark Applied
Hide
Analyst, Risk Analytics
London or New York City or Reston
OnsiteFull Time
Sony
SonyNYSE: SONY: Sells consumer electronics, video games, and entertainment media.
2+ YOERequires statistics and data analysis expertise, SQL and Python or R, data modeling, information security knowledge, and typically 2 years of relevant experience. Bachelor's degree preferred.
SQL, Python, R, Git, GitHub, GitLab, Microsoft Power BI, Tableau, Looker, Domo, CMDB, SIEM
2w
Save
Mark Applied
Hide
Risk Management Framework Analyst
Suffolk, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
5+ YOERequires 5+ years of NIST/RMF/CSF security experience, eMASS expertise, Top Secret clearance, and a relevant bachelor's degree or 10+ years of equivalent experience.
NIST, Risk Management Framework (RMF), Cybersecurity Framework (CSF), Enterprise Mission Assurance Support Service (eMASS), Tenable ACAS, Trellix ePO, ENS, ESS/HBSS, Tanium
2w
Save
Mark Applied
Hide
Risk Management Framework Analyst
Suffolk, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
5+ YOERequires 5+ years of NIST, RMF, and CSF security experience, eMASS, ATO documentation, DoD systems, Top Secret clearance, and DoDM 8140 intermediate or advanced certification; bachelor's degree or equivalent experience.
National Institute of Standards and Technology (NIST), Risk Management Framework (RMF), Cybersecurity Framework (CSF), Enterprise Mission Assurance Support Service (eMASS), Tenable ACAS, Trellix ePO, ENS, ESS/HBSS, Tanium, DoD STIGs, SRGs
1mo
Save
Mark Applied
Hide
Cyber Security
Norfolk, Virginia, United States
$75k-$158k/yr OnsiteFull Time
CACI
CACINYSE: CACI: Provides information technology and professional services to government clients.
Active DoD Secret clearance, Bachelors in information systems security or related, Security+ and Navy Qualified Validator must be obtainable; experience in cybersecurity, A&A, and risk management preferred.
eMASS, AWS
1mo
Save
Mark Applied
Hide
Cyber Security
Norfolk, Virginia, United States
$75k-$158k/yr OnsiteFull Time
CACI International
CACI InternationalNYSE: CACI: Provides information technology and engineering services for government agencies.
Active DoD Secret clearance, BS in information systems security or related field, Security+ and Navy Qualified Validator must be obtainable; A&A, risk management, and system security engineering experience preferred.
eMASS, AWS PCI DSS
2w
Save
Mark Applied
Hide
Cybersecurity Analyst
Arlington, Virginia, United States
$130k-$155k/yr OnsiteFull Time
Venture Global LNG
Venture Global LNGNYSE: VG: Develops and operates liquefied natural gas export facilities.
10+ YOEBachelor's degree or equivalent experience; 10+ years in cybersecurity, information security engineering, or security architecture; cloud, multi-cloud, risk assessment, security frameworks, IAM, cryptography, and DevSecOps expertise.
Azure, AWS, NIST 800-53, FISMA, FedRAMP, ISO 27000, SAML, OAuth, OIDC, Multi-Factor Authentication, DevSecOps
3w
Save
Mark Applied
Hide
Cybersecurity Analyst (Risk Management Framework) – TS/SCI w/ Polygraph
Annapolis Junction or Sterling
$128k-$173k/yr OnsiteFull Time
GDIT
GDITNYSE: GD: Delivers IT and mission services to government agencies.
6+ YOEActive TS/SCI with polygraph, 6+ years related experience, DoD 8570 IAT Level II cert (e.g., Security+ CE, CND, SSCP, GSEC, GICSP, CySA+, CCNA Security), bachelor’s or equivalent, 3+ years IC RMF A&A, 1+ year Xacta experience, NIST 800-53 knowledge.
Xacta
3w
Save
Mark Applied
Hide
Cybersecurity Analyst (Risk Management Framework) – TS/SCI w/ Polygraph
Annapolis Junction or Sterling
$128k-$173k/yr OnsiteFull Time
General Dynamics Information TechnologyNYSE: GD: Provides mission-critical IT services to government and defense organizations.
6+ YOEActive TS/SCI with Polygraph, 6+ years related experience, 3+ years IC RMF A&A experience, bachelor’s in technical field or equivalent, DoD 8570 IAT Level II cert (e.g., Security+ CE) and 1+ year Xacta experience.
Xacta
1w
Save
Mark Applied
Hide
Senior Data Analyst/Scientist
United States or Florida or Georgia or Maryland or North Carolina or New Jersey or New York or Pennsylvania or Rhode Island or South Carolina or Virginia or West Virginia
$110k-$130k/yr RemoteFull Time
Unacast
Unacast: Provides human mobility analytics and global location intelligence solutions.
5+ YOERequires 5+ years of information security experience, including 3+ years in AWS cloud security, with expertise in AWS architecture, security practices, risk assessment, incident response, and AI security risks.
Snowflake, SQL, Amazon Web Services (AWS), CISSP, AWS Certified Security Specialty, DevOps, LLM APIs
3w
Save
Mark Applied
Hide
Cyber Analyst, I (Hampton, VA)
Hampton, Virginia, United States
$66k-$74k/yr OnsiteFull Time
Referentia Systems Incorporated
Referentia Systems Incorporated: A cybersecurity services firm providing risk assessment and information assurance support for government and enterprise clients.
1+ YOEBachelor's in cybersecurity/CS/IT or equivalent experience,1+ year cyber risk assessment experience, IAM Level I/II, familiarity with NIST SP 800-53 and DoD guidance, strong analytical and communication skills, active DoD security clearance.
NIST SP 800-53, AFI 17-130, DODI 8510.01
1d
Save
Mark Applied
Hide
Cybersecurity Governance Analyst
Arizona or California or Florida or Georgia or Illinois or Massachusetts or Michigan or New Hampshire or New York or New Mexico or North Carolina or Tennessee or Virginia or Medford
$75k-$95k/yr RemoteFull Time
Agero
Agero: Provides digital roadside assistance and accident management software solutions.
3+ YOERequires 3–5 years in information security compliance and hands-on experience with PCI-DSS, SOC 2, or ISO 27001 frameworks, including control mapping, evidence evaluation, risk mitigation, and strong communication skills.
ISO 27001, PCI-DSS, SOC 2, DevSecOps, AI
2mo
Save
Mark Applied
Hide
Post-Quantum Cryptography (PQC) Program Analyst / Cryptographic Modernization Specialist
Alexandria, Virginia, United States
OnsiteFull Time
Novul Solutions
Novul Solutions: Providing cybersecurity, software engineering, and IT solutions for government.
10+ YOEBachelor's degree and 10+ years experience in cybersecurity/cryptography, PKI, security architecture, and risk management; experience with DoD cryptographic modernization, migration planning, and executive briefings; active Top Secret/SCI clearance required.
PKI, KMI, COMSEC, Risk Management Framework (RMF), Zero Trust Architecture, Microsoft Office Suite