GRC – Risk Management Lead

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Oversee a comprehensive governance, risk, and compliance program for a significant federal cybersecurity contract.

• Manage and update the enterprise risk register, which includes risk identification, assessment, and mitigation tracking.

• Oversee the lifecycle of the POA&M, from identification to remediation planning, monitoring, and validation of closure.

• Administer the GRC platform, focusing on workflow configuration, control mapping, and automating evidence collection.

• Conduct supply chain and third-party risk assessments for vendors, tools, and system integrations.

• Create and maintain risk dashboards and reporting for program and client leadership.

• Assist with continuous authorization (cATO) activities and regular security control assessments.

• Formulate and uphold risk management policies, procedures, and standard operating procedures.

• Collaborate with technical and operational teams on actionable remediation strategies.

• Lead and mentor a small team of GRC analysts, ensuring quality reviews and supporting their professional growth.

⛳️ Requirements

• Minimum of 5 years of experience in federal risk management, with direct involvement in applying the NIST Risk Management Framework (RMF).

• Bachelor's degree in Information Technology, Cybersecurity, Business, or a related discipline; equivalent experience will be considered in place of a degree.

• In-depth understanding of FISMA, NIST 800-53, NIST 800-37, and associated federal compliance frameworks.

• Experience in GRC platform administration, such as ServiceNow GRC, Xacta, RSA Archer, or similar tools.

• Excellent analytical and communication skills, with a proven track record of presenting risk information to leadership.

• Certification in CRISC or CISM is mandatory.

• CISSP or CGRC (formerly CAP) certification is preferred.

• Must possess US work authorization without current or future visa sponsorship.

🏝️ Benefits

• A collaborative and supportive community.

• Practical, hands-on experience.

• Opportunities for certifications.

• Access to industry training.

• Professional development opportunities.

• Reasonable accommodations for disabilities or religious observances.