Cybersecurity Governance and Risk Management (GRC) Lead

ERP International•Laurel, MD

57d•$165,000 - $210,000•Remote

About The Position

ERP International, LLC is seeking a Full Time Cybersecurity Governance and Risk Management (GRC) Lead to support the Centers for Medicare & Medicaid Services. This role provides strategic and operational support across cybersecurity program management, control assessments, continuous monitoring, audit readiness, risk analysis, policy development, and stakeholder engagement activities in highly regulated environments. The company is recognized as a Top Workplace and offers competitive salaries and benefits, including health, dental, vision, and retirement plans, along with unlimited job-related training and development, employee recognition programs, and opportunities to work with leading-edge technology.

Requirements

7+ years of cybersecurity, governance, compliance, auditing, risk management, or related experience.
3+ years leading governance, compliance, risk management, or cybersecurity oversight activities.
Experience supporting federal, healthcare, defense, financial services, or other highly regulated environments.
Experience with NIST Risk Management Framework
Experience with Enterprise Risk Management
Experience with Cybersecurity Governance
Experience with Compliance Assessments
Experience with Audit Readiness
Experience with Policy Development
Experience with Security Metrics and Reporting
Strong analytical, communication, and stakeholder engagement skills.
Bachelor's degree in Cybersecurity, Information Systems, Public Policy, Business Administration, Computer Science, or related discipline.
Must be able to obtain a government public trust Clearance/background check.

Nice To Haves

CISSP
CISM
CRISC
CGRC
CISA
PMP
ITIL
Security+
Experience supporting enterprise cybersecurity transformation initiatives.
Experience working with executive governance organizations or leadership councils.
Experience supporting privacy programs or data governance initiatives.
Experience developing cybersecurity maturity assessments and improvement roadmaps.
Experience supporting cloud governance, Zero Trust, or enterprise modernization efforts.
Experience supporting large-scale federal technology or business transformation programs.

Responsibilities

Support enterprise cybersecurity governance and compliance programs.
Conduct security control assessments and risk analyses.
Review and maintain security authorization documentation.
Support implementation of NIST, FISMA, and agency cybersecurity requirements.
Assist with continuous monitoring, vulnerability management, and remediation tracking.
Develop executive reports, dashboards, and risk briefings.
Participate in audit readiness and compliance activities.
Coordinate with technical teams, security stakeholders, and executive leadership.
Evaluate cybersecurity processes and recommend improvements.
Support cybersecurity modernization and transformation initiatives.