Cyber Risk Management Specialist

EOE Statement Anakim Consulting provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

Ashburn, VA 20147

Location:

100% On-Site
Security: DHS Suitability Public Trust

Multiple Openings!

Anakim Consulting is expanding our team supporting a large federal agency. Our Cyber Risk Management Specialists lead and execute enterprise cybersecurity risk management activities. These roles are responsible for evaluating threat environments, performing risk assessments, analyzing technical and operational controls, and aligning organizational posture with risk management frameworks. Higher-level roles drive strategic enterprise risk initiatives, establish governance methodologies, and provide executive risk reporting.

• Risk Assessment and Analysis: Perform comprehensive cyber risk assessments, analyze threat/vulnerability landscapes, and quantify security risks across systems and programs.
• Framework Implementation: Apply and maintain enterprise Risk Management Frameworks (RMF), policies, methodologies, and risk registers.
• Mitigation and Tracking: Evaluate control efficacy, formulate risk mitigation strategies, and track remediation efforts across organizational units.
• Reporting and Governance: Synthesize technical risk data into executive dashboards, briefings, and strategic reports to guide organizational decision-making.
• Cross-Functional Collaboration: Partner with system engineering, compliance, and leadership teams to ensure risk-informed architectural and operational decisions.

• U.S. citizenship, no dual citizenship
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD
• Availability to work on-site in Ashburn
• Education: Bachelor’s or Master’s degree in Cybersecurity, Risk Management, Information Technology, or related discipline
• Certifications:
  • Junior:
    CompTIA Security+, CRISC (associate)
  • Mid/Senior/Lead: CRISC, CISM, CISSP, CGEIT, PMI-RMP

• Supports risk identification, control evaluations, and risk register maintenance.
• Assists in gathering threat data and documenting risk assessment findings.
• Tracks assigned risk mitigation tasks.

• Conducts independent cyber risk assessments for enterprise systems and projects.
• Evaluates threat vectors, designs risk mitigation plans, and analyzes control gaps.
• Contributes to the refinement of risk methodologies and metrics.

• Leads high-impact enterprise risk assessments and complex threat modeling efforts.
• Develops risk reporting frameworks and delivers briefings to senior management.
• Mentors junior analysts and drives enterprise-wide risk strategy alignment.

• Directs the overall enterprise cyber risk assessment and management program.
• Establishes risk governance policies, methodologies, and operational standards.
• Serves as the primary risk advisor to executive leadership and oversees risk team operations.

#Cyber Risk #Cyber Risk Management  #GRC #Cyber Security Jobs  #Hiring #NIST #RMF #Risk Assessment #CRISC #Cyber Jobs #Now Hiring #Info Sec

Full-Time/Part-Time Full-Time

Salary Range This position offers a full-time W2 salary plus eligibility to participate in the company's benefits program.

Req Number INF-26-00038

About the Organization Anakim Consulting is a privately held small company that provides growth opportunities for employees. Come join our team!

This position is currently accepting applications.