Cyber Risk and Reporting Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the creation of enterprise-level cybersecurity metrics, performance indicators, and executive-level reporting.

• Generate regular executive dashboards, cybersecurity risk profiles, weekly leadership briefings, monthly status updates, and additional decision-support documents.

• Consolidate operational data from vulnerability management, incident response, RMF, continuous monitoring, penetration testing, and threat intelligence efforts into comprehensive risk analyses.

• Examine enterprise cybersecurity patterns, pinpoint systemic risks, and offer suggestions for enhancing operational effectiveness.

• Create performance indicators that assess program efficiency, SLA adherence, remediation efforts, authorization status, and overall cyber risk.

• Collaborate with technical teams to confirm reporting accuracy and maintain consistent data across program initiatives.

• Assist with FISMA reporting tasks by gathering, analyzing, and validating cybersecurity performance information.

• Detect emerging operational trends and relay important changes in enterprise risk posture to program leadership.

• Aid in executive briefings by crafting visual aids, summaries, and analytical reports for government stakeholders.

• Uphold reporting procedures, documentation, and data quality standards.

• Suggest enhancements through automation, improved metrics, and data integration.

⛳️ Requirements

• Experience in supporting NIH, HHS, or other Federal civilian agencies.

• Proficiency in developing operational dashboards using Power BI, Tableau, Splunk, or similar tools.

• Background in supporting FISMA reporting and continuous monitoring initiatives.

• Understanding of cyber threat intelligence, vulnerability management, and enterprise risk management.

• Experience with ServiceNow, Jira, SharePoint, or other enterprise reporting platforms.

• Bachelor’s degree in Cybersecurity, Information Systems, Information Technology, Data Analytics, Business, or a related field.

• Minimum of five years of experience in supporting cybersecurity programs, cyber risk management, governance, compliance, or security operations reporting.

• Proven track record in developing executive dashboards, cybersecurity metrics, and performance reporting.

• Experience in analyzing extensive operational datasets and converting technical insights into business-oriented recommendations.

• Familiarity with FISMA, NIST Risk Management Framework (RMF), Continuous Diagnostics and Mitigation (CDM), and enterprise cybersecurity operations.

• Excellent written and verbal communication skills, with the ability to present technical information to executive audiences.

• Strong analytical and problem-solving abilities.

• Preferred certifications: CISSP, CGRC, CISM, Security+, PMP, CDMP, or Microsoft Power BI Data Analyst Associate.

🏝️ Benefits

• Competitive salary, paid bi-monthly.

• Top-tier medical coverage.

• 100% of medical premiums covered by True Zero.

• Company-wide new business incentive programs.

• Contribution incentives (e.g., white papers, blog posts, internal webinars, etc.).

• 3 weeks of PTO plus 11 paid holidays annually.

• 401k program with a 100% company match on the first 4%.

• Monthly reimbursement for cell phone and home internet expenses.

• Paternity/maternity leave.

• Investment in training and certifications to enhance and expand your technical skills.