June 11, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. This role is pivotal in ensuring the confidentiality, integrity, and availability of both on-premises and cloud-hosted assets while enabling secure innovation at scale by working closely with cloud engineers, cybersecurity analysts, and program leadership to drive continuous improvement and deliver value to the mission.
Interface with the program manager, senior management, company contract employees, and other functional areas including prime contract customers, finance, accounts receivable, procurement, and subcontracts management. Effective communicator/team player working with program managers, proposal writers, and contract/pricing administrators to craft a total package of financial portions for new work effort solicitations.
You will design and execute test strategies, develop automated test scripts, and work with modern technologies including Python, SQL, Databricks, ADVANA, React, and Flask to deliver high-quality solutions that support DSCA’s mission of security cooperation, transparency, and data-driven decision making. 9 years relevant experience with Bachelors in related field; 7 years relevant experience with Masters in related field; 4 years relevant experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 13 years relevant experience.
Springfield, VA30+ days ago
Designs and implements information assurance and security engineering systems with requirements of business continuity, operations security, cryptography, forensics, regulatory compliance, internal counter-espionage (insider threat detection and mitigation), physical security analysis (including facilities analysis, and security management). Desired certifications or training: Intermediate to Advanced Spunk certifications (e.g., Splunk Enterprise Security Certified Admin, Splunk IT Service intelligence certified admin, Splunk SOAR Certified Automation Developer) Ansible, or equivalent CND-related coursework.
HII - Mission Technologies is currently seeking a SME Enterprise Vulernatiblity Management Lead to work out of Fairfax, VA in support of the DoD/DoW Advana War Data Platform designed to aggregate operational, intelligence, logistics, and sensor data from multiple domains, enable Joint All-Domain Command and Control (JADC2) by providing a common data fabric, and support AI/ML applications for predictive analytics, targeting, and mission planning. • 9 years relevant experience with Bachelors in related field; 7 years relevant experience with Masters in related field; 4 years relevant experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 13 years relevant experience.
p class="MsoNormal">Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions’ Privacy Policy and INSPYR Solutions’ AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. This role will focus on evaluating the effectiveness of Identity and Access Management (IAM) controls and other technology security controls while helping identify risks, document findings, and support remediation efforts.
Washington, DC30+ days ago
Founded in 2017 by Fortune 500 executives, including Chairman of the Board, Jim Rosenthal, Vice Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America and is committed to building a workplace where talented people are empowered to do their best work in the fight against global cyber threats. Led by CEO, John Hernandez, BlueVoyant's highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts.
Merrifield, VA30+ days ago
p class="MsoNormal">Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions’ Privacy Policy and INSPYR Solutions’ AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. This team is responsible for security, risk monitoring, and compliance across the Oracle ERP Fusion ecosystem, leveraging the Risk Management Cloud (RMC) module to identify, assess, and mitigate risk.
By applying for this job, you agree to receive AI-generated calls, text messages, and/or emails from Mitchell Martin Inc and its affiliates and contracted partners at various frequency through traditional and automated methods. You can access our privacy policy here https://www.mitchellmartin.com/privacy-policy. .
Merrifield, VA30+ days ago
b>Qualifications • Experience in the credit union/financial services industry with a focus on regulatory frameworks, information security assessments, and remediation activities • Desired knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series • Effective planning and organizational skills • Effective research, analytical and problem solving skills • Strong verbal, written and interpersonal communication skills, including technical writing • Desired Bachelor Degree in business, information systems or related field or equivalent work/military experience • Ability to present findings and conclusions clearly and concisely • Experience in working with all levels of staff, management, stakeholders, and third parties • Ability to build effective relationships through rapport, trust, diplomacy, and tact. The Contractor Analyst will be responsible for supporting the daily operations of issue management, partnering with RCSA and control testing teams as well as issue remediation tracking.
This team identifies, assesses, and helps mitigate operational risks across Global Operations Support Services (GOSS) - working to ensure that the processes supporting Amazon"s infrastructure portfolio are resilient, well-documented, and continuously improving. The Global Risk & Business Continuity function quantifies operational risk to influence strategic decisions across the infrastructure portfolio, translating disruptions and resilience gaps into financial and operational impact scenarios.
Arlington, VA30+ days ago
The responsibilities include supporting the insurance procurement process, overseeing data collection, data analysis, keeping data current in the department's Risk Management Information System, overseeing certificate of insurance compliance and issuance, invoice processing, policy review and general support of inquiries from various departments that seek risk management guidance. Supporting all corporate insurance placements and renewals, including but not limited to collecting and gathering submission data for property/casualty renewals (updating COPE across all assets as needed), participating in underwriter meetings, filling out apps, coordinating payment of invoices, etc.
The role supports the overall Enterprise Risk Management (ERM) Program's goal of maintaining and growing Circle's resiliency by identifying, assessing, and preparing its operations for any internal and external factors and risks that could interfere with reaching its goals and objectives. Circle's platform includes the world's largest regulated stablecoin network anchored by USDC, Circle Payments Network for global money movement, and Arc, an enterprise-grade blockchain designed to become the Economic OS for the internet.
Washington, DC30+ days ago
The Office's responsibilities include identifying and addressing potential security risks that threaten the scientific enterprise; establishing best practices for programs; conducting outreach activities for stakeholders; educating Department programs on potential security risks; and conducting due diligence reviews of DOE proposals, loans, and awards. We are seeking a Subject Matter Expert IV to support the Department of Energy (DOE), Office of International Affairs in its mission to protect federal investments from undue foreign influence and to accomplish its mission in ways that protect and further energy security and technological advancement of the United States.
p>ICI Services-a 100% employee-owned company proudly celebrating 26 years of excellence-is seeking a Junior Risk Analyst to immediately support our PMS 410 Frigate (FF(X)) Program Team at the Naval Sea Systems Command (NAVSEA) in Washington, DC. Responsibilities: In this role, you will work directly under the Risk Management Coordinator, contributing to the development and execution of the programs Risk, Issue, and Opportunity (RIO) Management framework.
p>Your Impact: In this role, you will be at the center of cybersecurity decision-making-analyzing risk, advising leadership, and ensuring emerging technologies are deployed securely and responsibly.
oin Peraton in advancing the safety, efficiency, and modernization of the National Airspace System (NAS) through the FAA's Brand New Air Traffic Control System (BNATCS) contract.
Arlington, VA30+ days ago
p>Senior Analystshave the knowledge, skills, abilities and initiative to deliver timely, practical and innovative solutions to our clients as part of high-performing project teams typically composed of a mix of junior and mid-level analysts who will look to you for technical acumen and mentoring. We deliver practical, credible and defensible results offering actionable insights by applying data-driven and analytics-based approaches in combination with multidisciplinary talent, subject matter experts, and tangible and repeatable assets in the form of databases, models, approaches and techniques.
Washington, DC30 days ago
As a Risk Analyst within FEMAs Resilience, Engineering and Modeling Division, the ideal candidate will have expertise on a wide range of highly complex initiatives focused on natural hazard risk assessment, risk analysis, loss modeling, geospatial sciences, and technology integration and utilization, while managing complex projects with numerous stakeholders and varied strategic objectives. If you meet the minimum qualifications, you will be placed in one of the following categories: Best Qualified: Applicants possessing experience that substantially exceeds the minimum qualifications of the position and demonstrate high proficiency in all of the critical competencies, including all Selective Placement Factors (SPF), and appropriate Quality Ranking Factors (QRF) as determined by the job analysis.
Alexandria, VA30+ days ago
Conduct due diligence and fact-finding research with DHS stakeholders to assess risk arising from foreign direct investment and the implications relative to DHS's security interests, industrial base supply chain, dual-use technology transfer, personal data, and cybersecurity. CFIUS is an interagency committee authorized to review certain transactions involving foreign investment in the United States and certain real estate transactions by foreign persons, in order to determine the effect of such transactions on the national security.
p>Minimum Requirements: 10+ years of experience with a Masters Degree Demonstrated expertise in RTES-related risk analysis and due diligence Possess significant understanding of regulations and authorities related to the Department of Energy and RTES, including but not limited to NSPM-33 and CHIPS and Science Act Experience using Excel, Power BI, Python and other advanced data analysis tools Excellent written and verbal communication skills for risk reporting and stakeholder engagement Possess a TS/SCI or Q security clearance. The Offices responsibilities include identifying and addressing potential security risks that threaten the scientific enterprise; establishing best practices for programs; conducting outreach activities for stakeholders; educating Department programs on potential security risks; and conducting due diligence reviews of DOE proposals, loans, and awards.
A Principal Risk Associate is responsible for the independent identification and management of counterparty credit risk of new and existing Payment Services partner relationships across the Global Payments Network, including key Acquirers, Issuers, Networks, Processors, Merchants, and other business partners. Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate's offer letter.
p>This role is ideal for a mid-career risk professional who is fluent in frameworks such as NIST RMF and CMMC, is developing practical experience with risk quantification methodologies like FAIR and OCTAVE, and is eager to grow within a fast-paced aerospace and defense SaaS environment. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
Tysons Corner, VA16 days ago
Included in the portfolio shall be Business Case Analysis (BCA) for the various IT options and alternatives being considered, providing: Options analysis to include modification of existing technology vs. Since our founding in 1998, we have helped clients leverage existing and emerging technologies to transform their enterprises, empower growth, drive innovation, and build sustainable success.
In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. This role blends hands-on security operations with business systems analysis, offering the opportunity to drive process improvements, support audit readiness, and enhance system controls using modern tools, including AI-enabled solutions.
Job ID: 20-32042 Key Requirements and Technology Experience: Provides timely, relevant, robust analyses to support business decisions related to credit risk. Degree in Statistics, Economics, Business, Mathematics, Computer Science or related field with 5-7 years related experience.
ul>Current or former competitive service federal employees with career or career-conditional tenure • Surplus or Displaced (CTAP or ICTAP) • Land Management • Individuals with Disabilities • Military Spouses • Veterans Employment Opportunity Act (VEOA) • Veterans Recruitment Appointment (VRA) • 30% or More Disabled Veterans • Peace Corps & AmeriCorps VISTA • Interchange Agreements with Other Merit Systems • Foreign Service Employees • Certain Former Overseas Employees. The Foreign Investment Risk Analyst position within the National Risk Management Center requires an individual with a subject matter expertise in the vulnerabilities, consequences, and mitigations related to national security that would result from transactions involving foreign investment in the United States and rooted in CISA and DHS equities, or those transactions involving telecommunications licenses meeting certain thresholds of foreign ownership or control.
p>For candidates who are based outside of New York City or who are applying for roles outside of New York City, for more information about conditions of any job offer please click here. Demonstrated experience administering vendor security questionnaires, reviewing evidence (SOC 2, ISO 27001, penetration test reports), applying scoring consistently at scale, and communicating findings to vendors and internal stakeholders.
You will be responsible for the full lifecycle of third-party risk management, including identifying, assessing, mitigating, and monitoring risks to ensure our programs and business operations remain secure and resilient. Conduct comprehensive risk assessments of new and existing vendors, focusing on financial health, operational resilience, corporate, human capital, anti-corruption, ESG, and regulatory compliance.
Alexandria, VA17 days ago
p>Under the direction of the Program Manager, Third Party Risk Management, the Third‑Party Vendor Risk Analyst supports the execution of the Bank's Third‑Party Risk Management (TPRM) Program by performing day‑to‑day operational, analytical, and facilitation activities. Coordinate with internal stakeholders, including Information Security, IT, Compliance, Finance, and Accounting, to obtain required risk assessment inputs and documentation necessary to support vendor reviews, providing enhanced facilitation for critical and GLBA‑High risk vendors.