82 security governance analyst jobs at 46 companies in Annapolis, MD
2w
Save
Mark Applied
Hide
2w
Senior Security Governance and Policy Analyst
Washington, District of Columbia, United States
$145k-$168k/yrOnsiteFull Time
Concurrent Technologies Corporation (CTC): An independent nonprofit applied scientific research and development organization delivering full-lifecycle solutions to government and private-sector clients.
10+ YOEBachelor's degree or equivalent experience, 10+ years of progressive cybersecurity experience, federal and intelligence community program experience, governance, policy, risk, compliance, cloud and on-premises expertise.
NIST Cybersecurity Framework (CSF), NIST Special Publications (800 Series), Risk Management Framework (RMF), FISMA, CNSS, Intelligence Community Directives (ICDs), Zero Trust Architecture
Sidley Austin: Private global law firm advising clients on complex transactions, restructuring, regulatory matters, investigations, and litigation.
5+ YOEBachelor's degree or 5 years relevant experience; knowledge of information governance, records management, data privacy, and information security; experience with cross-functional tech projects and document management systems.
NetDocuments, iManage, Microsoft SharePoint, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft OneDrive, Microsoft Outlook, Intapp Walls, Microsoft Purview, Cyberhaven, Netskope, Proofpoint
CDO Technologies: Private IT services firm providing cybersecurity, infrastructure, logistics, and technology solutions to federal and commercial clients.
10+ YOE10+ years supporting large cybersecurity programs, deep knowledge of Federal/DHS/IC cybersecurity policy, ability to translate policy into actionable plans and oversee execution.
Dexian Government Solutions: Private federal government contractor delivering enterprise IT, cybersecurity, cloud, AI/ML, and engineering services to government agencies.
10+ YOE10+ years cybersecurity experience; knowledgeable in Federal, DHS, and IC cyber policy; cloud and on‑premise experience; CISSP or CISM desirable; TS/SCI with CI Polygraph required; meets DoD 8140/WRC 628 requirements.
JWICS, NATO COSMIC, Risk Management Framework (RMF), CNSSI, NIST AI/ML guidance, DoD 8140
One Federal Solution: Professional services firm providing contract support to government agencies.
10+ YOE10+ years cybersecurity experience; knowledge of Federal, DHS, and IC cybersecurity policy; cloud and on‑premise experience; ability to translate policy into executable plans; CISSP or CISM desired.
Virtru: Private data security platform providing encryption and access controls for enterprises and government agencies.
5+ YOE5+ years in information security/GRC or IT audit, deep knowledge of CMMC/NIST/FedRAMP/SOC2/PCI, cloud and GRC tool experience, strong communication and risk assessment skills.
AI Security Governance and Risk Analyst - TS/SCI and Polygraph
Bethesda, Maryland, United States
$187k-$252k/yrOnsiteFull Time
General Dynamics Information TechnologyNew York Stock Exchange: GD: Provider of enterprise IT services and defense solutions.
7+ YOERequires TS/SCI with polygraph, U.S. citizenship, bachelor's degree in a related discipline, and 7+ years of experience. Desirable credentials include CISSP, CISM, GSLC, or AI governance certifications.
NIST SP 800-53, NIST AI RMF, Risk Management Framework, Zero Trust
AI Security Governance and Risk Analyst - TS/SCI and Polygraph
Bethesda, Maryland, United States
$187k-$252k/yrOnsiteFull Time
General Dynamics Information TechnologyNew York Stock Exchange: GD: Provider of enterprise IT services and defense solutions.
7+ YOEBachelor’s degree in a related technical discipline, 7+ years of related experience, U.S. citizenship, and TS/SCI clearance with polygraph. CISSP, CISM, or GSLC and AI governance certification are preferred.
NIST SP 800-53, NIST AI RMF, Risk Management Framework, Zero Trust, Artificial Intelligence (AI)
Board of Governors of the Federal Reserve System: U.S. government central banking agency that sets monetary policy, supervises financial institutions, and oversees Federal Reserve System.
6+ YOESenior information security analyst with 6+ years of experience, bachelor's degree or equivalent, strong risk management, governance, and compliance knowledge.
Booz Allen HamiltonNYSE: BAH: Global firm providing management, technology, and engineering consulting services.
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles, experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS), knowledge of NIST frameworks and federal security standards, HS diploma/GED, U.S. citizenship required.
Armada: Government contracting and professional services provider.
5+ YOESecret clearance required; Bachelor's in security (or 10 years experience) and 5+ years qualifying experience; knowledge of NISP/EO 12829, DD Form 254, FCL/PCL/FOCI/NID; Microsoft Office and government security systems proficiency.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft Access, NCAISS, NISS, JPAS, CVS, ISMS
Sancorp Consulting: Service-disabled veteran-owned federal contractor providing cybersecurity, intelligence, AI/ML, and professional services to government agencies.
5+ YOETS/SCI and U.S. citizenship required. Bachelor's in security-related discipline plus 5+ years (or 10 years experience). Experience in physical access control, credential/identity management, risk methodologies, security engineering, and government databases; intermediate Microsoft Office skills.
Microsoft Office, Microsoft Word, Microsoft Access, Microsoft Excel, Microsoft PowerPoint, DOD365, SharePoint, Adobe Acrobat, MPICAM, ISMS, Modified Infrastructure Survey Tool (MIST), Interagency Security Committee - Compliance System (ISC-CS), Homeland Security Information Network (HSIN)
LMI: Consulting and technology solutions for federal government agencies.
1+ YOEHigh school diploma or equivalent required; one year of government security program experience preferred. Must obtain Secret clearance and use word processing, database, and spreadsheet software.
Joint Personnel Adjudication System (JPAS), C-Cure
El Segundo or Los Angeles or Washington or San Francisco or San Diego or Seattle or London
$120k-$150k/yrHybridFull Time
CHAOS Industries: Redefining modern defense with a multi-product portfolio.
5+ YOEBachelor's degree or equivalent experience, 5+ years of GRC or compliance experience, DoD or military experience, audit support, risk assessment, GRC tooling, and knowledge of major security frameworks.
LMI: Consulting and technology solutions for federal government agencies.
1+ YOEHigh school diploma or equivalent required; one year of government security program experience preferred. Must be able to obtain Secret clearance and use word processing, database, and spreadsheet software.
Joint Personnel Adjudication System (JPAS), C-Cure, Security Management System
Booz Allen HamiltonNYSE: BAH: Global firm providing management, technology, and engineering consulting services.
6+ YOERequires TS/SCI clearance, MAGTF operations and CI/HUMINT integration knowledge, training expertise, and qualifying intelligence experience with a high school diploma, associate's degree, or bachelor's degree in intelligence.
Knox Systems: Private U.S. cloud security providing FedRAMP-authorized managed cloud and compliance software for SaaS and AI vendors.
5+ YOERequires 5+ years in security operations, senior floor experience, people development, cloud security monitoring, detection engineering, and incident response. U.S. citizenship and ability to pass a government background investigation required.
Mayvin: Mayvin is a private government-services contractor delivering technical and mission-support services to U.S. national-security agencies.
8+ YOEBachelor's degree and 8+ years of experience with physical security systems, equipment lifecycle management, and federal security operations. U.S. citizenship and successful background investigation required.
Steampunk: Federal contractor providing human-centered IT and mission solutions.
4+ YOEBachelor's degree and 4+ years as a federal government business analyst. Requires Salesforce.com, Agile and DevSecOps knowledge, technical documentation, analytical skills, and ability to obtain a government security clearance.