Top 77 Crisc Jobs in Arlington, Va

Senior Director of Security Configuration Management & Cyber Governance
Fannie Mae —Reston, VA
- $226,000 - $306,000 a year
- Full-time
- Computer Science
- Office
- Master's degree
Governance, Risk & Compliance (GRC) Analyst
SkyePoint Decisions —Washington, DC
- Remote
- 5 years
- Mid-level
- Analysis skills
- Health savings account
- Disability insurance
Quick Apply
3d
Senior, Technology 3rd Party Risk - Tax Transformation
Deloitte —Arlington, VA
- $93,000 - $191,000 a year
- Full-time
- Hybrid work
- Computer science
- CPA
- Computer Science
8d
Director, Cybersecurity Compliance
VHC Health —Arlington, VA
- $151,840 - $288,496 a year
- Full-time
- Management
- HIPAA
- Master's degree
- Health insurance
- Dental insurance
Jr. Information Systems Security Officer (ISSO)
Tyto Athene, LLC —Washington, DC
- $125,000 - $135,000 a year
- Full-time
- Azure
- Inventory management
- Mid-level
- Disability insurance
- Health insurance
3d
Vulnerability Management Analyst
SkyePoint Decisions —Washington, DC
- $110,000 - $130,000 a year
- Remote
- Computer Science
- 5 years
- Mid-level
- Health savings account
- Disability insurance
Quick Apply
3d
Enterprise Cybersecurity GRC Governance Analyst
Booz Allen Hamilton —McLean, VA
- $99,000 - $225,000 a year
- Full-time
- Office
- 8 years
- High school diploma or GED
- Health insurance
- Flexible spending account
Enterprise Cybersecurity Vulnerability Risk Analyst
Booz Allen Hamilton —McLean, VA
- $99,000 - $225,000 a year
- Full-time
- Azure
- 5 years
- Office
- Health insurance
- Flexible spending account
Vulnerability Management Lead
Valiant Solutions, LLC —Washington, DC
- Online Application
- Remote
- 6 years
- Inventory management
- Windows
- Paid holidays
- Disability insurance
Enterprise Cybersecurity AI Risk Analyst
Booz Allen Hamilton —McLean, VA
- $99,000 - $225,000 a year
- Full-time
- 5 years
- Office
- High school diploma or GED
- Health insurance
- Flexible spending account
Associate Cybersecurity Analyst, Applied Cryptography - Local Candidates Only
Visa Technology and Operations LLC —Ashburn, VA
- $88,000 - $136,900 a year
- Full-time
- Hybrid work
- Customer service
- Mid-level
- Office
- Wellness program
- Health savings account
Vulnerability Management Lead
SkyePoint Decisions —Washington, DC
- $110,000 - $130,000 a year
- Remote
- 6 years
- Bachelor's degree
- Senior level
- Health savings account
- Disability insurance
Quick Apply
Manager, Cyber Risk & Analysis
Information Technology Senior Management Forum —McLean, VA
- $164,800 - $205,100 a year
- Email
- 3 years
- High school diploma or GED
- Bachelor's degree
- Health insurance
AWS Assessor
SkyePoint Decisions —Washington, DC
- $130,000 - $147,000 a year
- Remote
- Azure
- 5 years
- AWS
- Health savings account
- Disability insurance
Quick Apply
Cybersecurity Policy Analyst / Expert
Blu Omega —Washington, DC
- $110,000 - $190,000 a year
- Computer Science
- Mid-level
- Office
- AD&D insurance
- Paid holidays
Cybersecurity Policy Analyst / Expert
Blu Omega LLC —Washington, DC
- $110,000 - $190,000 a year
- Contract
- Computer Science
- Mid-level
- Office
- AD&D insurance
- Paid holidays
Information Systems Security Officer (ISSO)
Tyto Athene, LLC —Washington, DC
- $155,000 - $165,000 a year
- Full-time
- Azure
- Inventory management
- 5 years
- Disability insurance
- Health insurance
3d
Information System Security Officer (ISSO) - Hybrid
Coalfire Federal —Washington, DC
- Full-time
- 5 years
- Bachelor's degree
- Senior level
- Paid parental leave
- Parental leave
Program Manager
Softthink Solutions —Herndon, VA
- Full-time
- Office
- 8 years
- US work authorization
Consultant II, Technology 3rd Party Risk Management - Tax Transformation
Deloitte —Arlington, VA
- $76,600 - $157,000 a year
- Full-time
- Hybrid work
- Computer science
- CPA
- Computer Science
8d

I want to receive the latest job alert for crisc in arlington, va

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

crisc jobs near arlington, va

Information Systems Security Officer jobs in Washington, DC

Cybersecurity Analyst jobs in McLean, VA

Management Analyst jobs in Washington, DC

Policy Analyst jobs in Washington, DC

Risk Manager jobs in McLean, VA

Director Of Security jobs in Reston, VA

Compliance Officer jobs in Washington, DC

Senior Technology Analyst jobs in Arlington, VA

Risk Manager jobs in Arlington, VA

Cybersecurity Analyst jobs in Ashburn, VA

Information Systems Security Officer jobs in New York, NY

Security Officer Paid Perc Card Training jobs in Chicago, IL

Servicon Systems jobs in Los Angeles, CA

Information Systems Security Officer jobs in Columbia, SC

Information Systems Security Officer jobs in Warrenton, VA

Information Systems Security Officer jobs in Virginia

Berkshire Health Systems jobs in Pittsfield, MA

Cybersecurity Analyst jobs in Southlake, TX

Entry Level Data Analyst jobs in Chicago, IL

Cybersecurity Analyst jobs in Conroe, TX

Senior Director of Security Configuration Management & Cyber Governance

Fannie Mae -
Reston, VA

Apply Now

Job Details

Full-time
$226,000 - $306,000 a year

Qualifications

Large-scale organizational change management
Managing IT teams
Information & network security team management
Industry knowledge of financial regulations
Regulatory Frameworks (Architecture security)
Cloud compliance
Regulatory compliance analysis
Project leadership

Full Job Description

Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.

Job Description

In this compelling leadership position, you will plan and direct a function and team responsible for designing, developing, testing, or maintaining hardware, technology, or processes, and ensure the coordination of business unit operational activities.

The Senior Director of Security Configuration Management & Cyber Governance is a strategic cybersecurity leader responsible for establishing, governing, and continuously improving enterprise-wide security configuration management, cyber governance, compliance, and risk oversight programs. This role ensures the organization's technology assets, platforms, and services are securely configured, governed according to industry best practices, and aligned with regulatory, business, and risk management objectives.

The Senior Director will lead multidisciplinary teams responsible for security baselines, configuration standards, governance frameworks, policy management, compliance oversight, control effectiveness, and cyber risk reporting. This leader serves as a trusted advisor to executive leadership, technology organizations, audit partners, regulators, and business stakeholders to strengthen the organization's cybersecurity posture while enabling business transformation and innovation.

Key Responsibilities

Strategic Information Security Leadership & Governance

Develop and execute the enterprise strategy for security configuration management and cyber governance.

Provide executive-level reporting on cyber risk, control effectiveness, compliance posture, and configuration management maturity aligned with risk appetite

Partner with business, technology, risk, legal, compliance, and audit stakeholders to ensure consistent governance practices across the Information Security organization.

Drive continuous improvement initiatives that enhance operational resilience, security effectiveness, and regulatory readiness.

Monitor emerging cyber threats, vulnerabilities, and industry trends to proactively address risks.

Security Configuration Management

Establish enterprise security configuration standards, baselines, and hardening requirements across Cloud, SaaS and On Prem software services.

Ensure secure configuration controls are integrated into system development, deployment, and operational processes.

Oversee configuration compliance monitoring, risk prioritization, remediation governance and executive reporting.

Lead initiatives to automate configuration management, compliance validation, and security configuration enforcement.

Define key performance indicators (KPIs), key risk indicators (KRIs), and metrics to measure security configuration compliance and risk reduction outcomes.

Ensure alignment with industry frameworks such as NIST, CIS Benchmarks and relevant regulatory requirements.

Drive continuous improvement of configuration compliance, and security control effectiveness.

Ensure timely remediation of security misconfigurations across the enterprise

Lead security configuration management assessments and audits conducted by internal audit, regulators, and external parties. Ensure effective remediation of audit findings and regulatory observations.

Cyber Governance

Lead cyber assurance governance program, partnering with Information Security Standard owners to define key requirements and monitors

Lead development of governance dashboards, scorecards, and metrics that provide transparency into control performance, compliance posture, risk trends, and remediation progress.

Present cybersecurity risks, trends, and remediation status to executive leadership, risk committees, and governance forums.

Monitor emerging cybersecurity threats, regulatory developments, and industry trends to proactively evolve governance practices.

Ensure alignment with enterprise risk management frameworks and regulatory expectations.

Leadership & People Management

Build, lead, mentor, and develop high-performing teams focused on security governance, security configuration management, and cyber risk oversight.

Foster a culture of accountability, innovation, collaboration, and continuous learning.

Establish clear goals, performance expectations, and development plans for leaders and team members.

Drive workforce planning, succession planning, talent acquisition, and leadership development initiatives.

Manage budgets, vendor relationships, and strategic initiatives.

Influence and inspire cross-functional teams without direct authority to achieve strategic cybersecurity objectives.

Promote strong partnerships across technology, security operations, engineering, architecture, risk, compliance, and business functions.

Serve as a key cybersecurity representative to executive leadership committees and governance forums.

Communicate complex technical and risk topics in clear business terms appropriate for executive and board-level audiences.

Build strong relationships with regulators, auditors, industry peers, and external partners.

Influence strategic technology decisions through cybersecurity governance and risk management expertise.

Minimum Required Experiences

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field.

8 years of progressive experience in cybersecurity, information security, risk management, governance, or technology leadership roles.

8+ years of leadership experience managing large teams and senior-level managers.

Demonstrated experience leading enterprise-scale security configuration management, cyber governance, risk, compliance, or security engineering programs.

Deep understanding of cybersecurity frameworks, standards, and regulations including NIST CSF, NIST 800-53, CIS Controls, ISO 27001, COBIT, and relevant regulatory requirements.

Deep knowledge of cloud security, infrastructure security, endpoint security, security configuration management, and security operations.

Experience presenting cybersecurity strategies, risks, and performance metrics to executive leadership and executive committees

Proven ability to lead organizational change and drive adoption of enterprise security initiatives.

Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, Risk Management, or related field.

Strong understanding of regulatory requirements applicable to financial services or highly regulated industries.
Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.

Desired Experiences

Master's degree in Cybersecurity, Information Security, Business Administration, or related discipline.

Industry certifications such as CISSP, CISM, CRISC, CGEIT, CISA, or equivalent.

Experience within highly regulated industries such as financial services, government, healthcare, or critical infrastructure.

Experience implementing governance and security configurations and controls across hybrid cloud and modern technology environments.

Knowledge of DevSecOps, Infrastructure as Code (IaC), automated compliance monitoring, and security orchestration technologies.

Leadership Competencies

Strategic Thinking and Vision

Executive Presence and Influence

Risk-Based Decision Making

Talent Development and Coaching

Organizational Leadership

Change Management

Cross-Functional Collaboration

Operational Excellence

Accountability and Results Orientation

Qualifications

Active Directory (AD), Active Directory (AD), Amazon Web Services (AWS), Artificial Intelligence (AI), Atlassian JIRA, Authentication Management, Backup and Recovery (Software), Business Insight Skills, Business Process Management Skills, Calendar and Scheduling Tools, Cleaning and Transforming Data, Cloud Technology, Collaborating Cross-Functionally, Communicating in Technical Writing, Communicating Technical Information, Communication, Configuration Management (CM), Conflict Resolution, Coordination, Customer and Market Insights, Customer Relationship Management (CRM), CyberArk, Cybersecurity Analysis, Data Analysis, Data Analysis Interpretation {+ 60 more}

Education:

Bachelor's Level Degree (Required), Master's Level Degree

The future is what you make it to be. Discover compelling opportunities at Fanniemae.com/careers.

For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.

Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity/gender expression, marital or parental status, or any other protected factor. Fannie Mae is committed to providing reasonable accommodations to qualified individuals with disabilities who are employees or applicants for employment, unless to do so would cause undue hardship to the company. If you need assistance using our online system and/or you need a reasonable accommodation related to the hiring/application process, please complete this form.

The hiring range for this role is set forth below. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications. This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program). As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being. See more here.

Requisition compensation:

226000

306000

Apply Now

Refine Your Search

crisc jobs in arlington, va

Senior Director of Security Configuration Management & Cyber Governance

Governance, Risk & Compliance (GRC) Analyst

Senior, Technology 3rd Party Risk - Tax Transformation

Director, Cybersecurity Compliance

Jr. Information Systems Security Officer (ISSO)

Vulnerability Management Analyst

Enterprise Cybersecurity GRC Governance Analyst

Enterprise Cybersecurity Vulnerability Risk Analyst

Vulnerability Management Lead

Enterprise Cybersecurity AI Risk Analyst

Associate Cybersecurity Analyst, Applied Cryptography - Local Candidates Only

Vulnerability Management Lead

Manager, Cyber Risk & Analysis

AWS Assessor

Cybersecurity Policy Analyst / Expert

Cybersecurity Policy Analyst / Expert

Information Systems Security Officer (ISSO)

Information System Security Officer (ISSO) - Hybrid

Program Manager

Consultant II, Technology 3rd Party Risk Management - Tax Transformation

I want to receive the latest job alert for crisc in arlington, va

Related Searches

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected