Cybersecurity Governance and Risk Management (GRC) Lead

ERP International • Laurel, MD

1d • Remote

About The Position

ERP International, LLC is seeking a Full Time Cybersecurity Governance and Risk Management (GRC) Lead to support the Centers for Medicare & Medicaid Services. The successful candidate will provide strategic and operational support across cybersecurity program management, control assessments, continuous monitoring, audit readiness, risk analysis, policy development, and stakeholder engagement activities in highly regulated environments. ERP International is honored to be named a 2026 Top Workplace by WTOP News! 7 Years Running.

Requirements

• 7+ years of cybersecurity, governance, compliance, auditing, risk management, or related experience.
• 3+ years leading governance, compliance, risk management, or cybersecurity oversight activities.
• Experience supporting federal, healthcare, defense, financial services, or other highly regulated environments.
• Experience with: NIST Risk Management Framework, Enterprise Risk Management, Cybersecurity Governance, Compliance Assessments, Audit Readiness, Policy Development, Security Metrics and Reporting
• Strong analytical, communication, and stakeholder engagement skills.
• Bachelor's degree in Cybersecurity, Information Systems, Public Policy, Business Administration, Computer Science, or related discipline.
• Must be able to obtain a government public trust Clearance/background check

Nice To Haves

• Desired Certifications: One or more of the following: CISSP, CISM, CRISC, CGRC, CISA, PMP, ITIL, Security+
• Experience supporting enterprise cybersecurity transformation initiatives.
• Experience working with executive governance organizations or leadership councils.
• Experience supporting privacy programs or data governance initiatives.
• Experience developing cybersecurity maturity assessments and improvement roadmaps.
• Experience supporting cloud governance, Zero Trust, or enterprise modernization efforts.
• Experience supporting large-scale federal technology or business transformation programs.

Responsibilities

• Support enterprise cybersecurity governance and compliance programs.
• Conduct security control assessments and risk analyses.
• Review and maintain security authorization documentation.
• Support implementation of NIST, FISMA, and agency cybersecurity requirements.
• Assist with continuous monitoring, vulnerability management, and remediation tracking.
• Develop executive reports, dashboards, and risk briefings.
• Participate in audit readiness and compliance activities.
• Coordinate with technical teams, security stakeholders, and executive leadership.
• Evaluate cybersecurity processes and recommend improvements.
• Support cybersecurity modernization and transformation initiatives.

Benefits

• Competitive Salaries & Benefits to include Health, Dental, Vision and Retirement!
• Health Advocate & Concierge Services!
• Unlimited Job- Related Training & Development!
• Employee Recognition & Incentive Programs!
• Employee Appreciation & Company Sponsored Events!
• Opportunity to work with leading edge technology!
• Community Outreach & Charity Work!

What This Job Offers

• Job Type: Full-time
• Career Level: Senior