Top Remote Cyber Security Jobs in Washington, DC

Leads IT governance, risk, and compliance activities, including SOC 2 readiness, audit planning and execution, policy development, control assessments, evidence gathering, remediation tracking, and regulatory research. Partners with auditors, control owners, IT leadership, and GRC team members to maintain compliance with NIST CSF and financial services regulations. Provides guidance on audit and policy matters while improving GRC processes and tooling.

Own Playlist's technical GRC architecture across multiple compliance frameworks. Build and maintain a unified Master Control List, framework crosswalks, evidence workflows, and control lifecycle processes. Automate compliance evidence collection and develop AI-powered GRC tools for risk quantification, vendor assessments, and monitoring. Partner with engineering, legal, finance, auditors, and product teams to translate requirements into actionable controls and harmonize compliance across multiple brands and acquisitions.

Lead GE Vernova's Secure Procurement Program to set supplier cybersecurity requirements, run supplier assessments and audits, embed security into procurement/contracts, drive SBOM and SCA adoption, manage remediation, report supplier risk to executives, and mentor teams on ISA/IEC 62443 and OT/ICS supply chain security.

Architects and validates complex, multi-product Twilio solutions for enterprise customers, specializing in trust, identity, security, fraud, and compliance. Leads technical discovery, workshops, demos, proofs of concept, executive presentations, and solution validation. Partners with sales, solutions engineering, product, R&D, and marketing teams to influence roadmaps, create repeatable architecture patterns, communicate customer trends, and serve as a regional technical authority and thought leader.

Leads Carina’s cloud infrastructure, internal IT, cybersecurity, risk management, compliance, and business continuity programs. Oversees AWS platform operations, infrastructure as code, deployment reliability, observability, incident response, disaster recovery, employee technology, identity systems, vendors, budgets, and governance. Advises executives on technology strategy, security posture, operational risk, and investments while partnering with Engineering and Data to provide a secure, reliable technology foundation.

Supports Department of Veterans Affairs cybersecurity authorization and risk management activities across the full NIST RMF and ATO lifecycle. Develops security artifacts, assesses risks and vulnerabilities, implements controls, manages POA&Ms, and coordinates remediation with technical and business stakeholders. The role also supports cloud security, FedRAMP, continuous monitoring, compliance assessments, security documentation, and briefings.

Leads Alkami’s enterprise and technology risk management program, including risk assessments, control evaluations, mitigation, monitoring, reporting, and escalation. Owns AI, machine learning, and generative AI governance, translating regulatory and risk expectations into practical policies, controls, and review processes. Partners with cross-functional risk owners and supports compliance initiatives involving business continuity, disaster recovery, regulatory management, and incidents. Reports to the Chief Compliance Officer in a fully remote role.

Own enterprise sales in Ohio and Michigan selling Axonius cybersecurity solutions to organizations >2,000 employees. Build a 4x pipeline, execute value-based selling (MEDDPIC), manage complex multi-stakeholder deals, partner with channels and internal teams, maintain Salesforce/Clari hygiene, and deliver accurate forecasts to exceed revenue targets.

Designs and ships macOS endpoint detection and response agents, including privileged daemons, system extensions, telemetry instrumentation, event correlation, prevention logic, and tamper protection. The role requires optimizing high-volume sensor performance, building automated and VM-based tests, resolving customer escalations, and partnering with security research, AI, platform, and product teams. It also involves code review, mentoring, release-quality ownership, and on-call support.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.