GRC / Risk Management Lead
Core
Lead a continuous governance, risk, and compliance program for a large federal cybersecurity contract, managing enterprise risk registers and POA&M lifecycles.
Role type
Senior GRC / Risk Management Lead
Builds
Executive risk dashboards and reporting for program and client leadership
Domain
US Federal Government / Cybersecurity Compliance
Required skills
NIST RMF, POA&M lifecycle management, GRC platform administration, supply chain risk assessment, policy development, team leadership
Preferred skills
CISSP, CGRC
Technologies
ServiceNow GRC, Xacta, RSA Archer
Responsibilities
Own and maintain the enterprise risk register; Manage the POA&M lifecycle end-to-end; Administer the GRC platform; Lead supply chain and third-party risk assessments; Build and maintain risk dashboards; Support continuous authorization (cATO) activities; Develop and maintain risk management policies; Coordinate with technical teams for remediation; Lead and mentor a small team of GRC analysts
Seniority
Senior, hands-on IC with team leadership
