Enterprise Cyber Risk Functional Area Lead

Guidehouse•Dc, DC

11d•$130,000 - $216,000

About The Position

Lead a team of up to 15 analysts in the delivery of detailed cybersecurity risk analysis and reporting project with a large federal agency. Prepare for cybersecurity risk assessments by performing detailed organizational research and analysis to determine potential business impacts. Conduct Tier 1 (organization) and Tier 2 (business/mission) level cybersecurity risk assessments in accordance with NIST Federal Information Processing Standards and Special Publications, OMB guidance, DHS Binding Operational Directives, and other regulatory authorities. Perform detailed quantitative and qualitative organizational research and analysis regarding cybersecurity risks (threats, vulnerabilities, likelihood, and impact). Identify and develop detailed actionable recommendations for remediating cybersecurity risks in alignment with the organization’s defined risk tolerances and risk threshold. Gather threat and vulnerability information from internal and external information sharing forums and sources. Communicate cybersecurity risk assessment results through written narrative reports and executive-level presentations Identify, coordinate, track remediation, and monitor risk exposures. Evaluate cybersecurity program effectiveness in identifying, managing, and reducing risk. Collaborate cross-functionally with internal analysts and engage external stakeholders to build awareness of cybersecurity risk assessment initiatives. Leverage AP writing style to write and communicate detailed reports to support leadership decision making. Provide cybersecurity related expertise for identifying key performance indicators for monitoring the performance of the Departments cybersecurity program.

Requirements

An ACTIVE and CURRENT SECRET federal security clearance.
Bachelor’s Degree AND eight (8) years of relevant experience, OR a Master’s Degree AND SIX (6) years of relevant experience.
Team leadership or management experience within cyber security risk analysis
Excellent verbal and written communication skills, specifically in report writing.

Nice To Haves

CRISC, CISSP or a Cyber AI certification.
Strong Background in facilitating agency CIO FISMA metric reporting
Experience with Tableau for data management
Experience consulting federal agencies on implementing Zero Trust requirements

Responsibilities

Lead a team of up to 15 analysts in the delivery of detailed cybersecurity risk analysis and reporting project with a large federal agency.
Prepare for cybersecurity risk assessments by performing detailed organizational research and analysis to determine potential business impacts.
Conduct Tier 1 (organization) and Tier 2 (business/mission) level cybersecurity risk assessments in accordance with NIST Federal Information Processing Standards and Special Publications, OMB guidance, DHS Binding Operational Directives, and other regulatory authorities.
Perform detailed quantitative and qualitative organizational research and analysis regarding cybersecurity risks (threats, vulnerabilities, likelihood, and impact).
Identify and develop detailed actionable recommendations for remediating cybersecurity risks in alignment with the organization’s defined risk tolerances and risk threshold.
Gather threat and vulnerability information from internal and external information sharing forums and sources.
Communicate cybersecurity risk assessment results through written narrative reports and executive-level presentations
Identify, coordinate, track remediation, and monitor risk exposures.
Evaluate cybersecurity program effectiveness in identifying, managing, and reducing risk.
Collaborate cross-functionally with internal analysts and engage external stakeholders to build awareness of cybersecurity risk assessment initiatives.
Leverage AP writing style to write and communicate detailed reports to support leadership decision making.
Provide cybersecurity related expertise for identifying key performance indicators for monitoring the performance of the Departments cybersecurity program.

Benefits

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend