Cyber & Risk Management Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Facilitate ongoing enterprise and division risk assessments via stakeholder interviews and examinations of incidents, audits, projects, operations, and emerging threats.

• Recognize strategic, operational, reporting, compliance, technology, and cybersecurity risks.

• Maintain the enterprise risk register and implement likelihood/impact scoring.

• Establish and oversee KRIs/KPIs, trends, emerging risks, and mitigation strategies, including monthly follow-ups with risk owners.

• Create Risk Assessment Reports (RARs), ERM dashboards, and reports for senior leadership and the Risk Committee.

• Assess policies, processes, controls, audits, and compliance reviews to pinpoint weaknesses, noncompliance issues, and control gaps.

• Collaborate with risk liaisons and process owners to define, monitor, and verify corrective and mitigation actions.

• Offer ERM guidance, training, templates, tools, expectations, and deadlines to stakeholders.

• Enhance ERM procedures, dashboards, workflows, and automation.

• Compare practices against COSO ERM, ISO 31000, and relevant Federal cybersecurity and risk standards.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Risk Management, or a related field.

• More than 10 years of pertinent experience in enterprise risk management, cybersecurity/IT risk, information assurance, governance, compliance, or related domains.

• Senior-level industry certification such as CISSP or an equivalent qualification.

• Proven technical and management leadership on significant cybersecurity or risk projects.

• Experience in setting goals/plans, directing multidisciplinary activities, and engaging with senior Government/client leadership.

• In-depth knowledge of enterprise/cybersecurity risk assessments, risk registers, likelihood/impact scoring, KRIs/KPIs, mitigation tracking, controls, compliance, and executive risk reporting.

• Experience in assessing security/risk requirements, policies, controls, vulnerabilities, and compliance matters, and providing recommendations for solutions or corrective measures.

• Background in enhancing risk processes, tools, dashboards, workflows, templates, or automation.

• Experience in coordinating with risk owners, liaisons, technical teams, and senior stakeholders.

• Capability to obtain a 6c Public Trust clearance.

• An active Secret clearance is highly preferred.

• U.S. Citizenship is required.

🏝️ Benefits

• Certification incentive program.

• Paid Time Off (PTO).

• Options for floating federal holidays.

• HMO insurance options.

• High Deductible health plans with Health Savings Accounts (HSAs).

• Flexible Spending Accounts (FSAs).

• Comprehensive Dental Plans.

• Vision insurance.

• Short-term and long-term disability insurance.

• Life Insurance.

• 401k matching.

• Professional development opportunities through certification incentives.

• Flexible Work Environment.