Governance, Risk, and Compliance Analyst

Guidehouse•Dc, DC

4d•$98,000 - $163,000

About The Position

Guidehouse is seeking a cybersecurity governance consultant to provide governance documentation and implementation support to a client cybersecurity governance, risk management, and compliance (GRC) program. The governance consultant will be responsible for developing cybersecurity policy, plan, and procedure documentation and assisting with implementation.

Requirements

An ACTIVE and MAINTAINED "TOP SECRET" Federal or DoD security clearance
Bachelor’s degree
THREE (3) or more years of experience working in federal cybersecurity or IT

Nice To Haves

Bachelor’s degree in cybersecurity, information security, or a related field
Strong understanding of federal cybersecurity requirements and frameworks
Demonstrated experience developing high-level formal governance documentation such as policies or plans
Demonstrated experience developing technical governance documentation such as procedures, workflows, and diagrams
Demonstrated experience working with both technical and management audiences to implement new policies and processes
Demonstrated experience identifying opportunities for governance improvements and championing implementation of new policies or processes
Excellent written and verbal communication skills
Excellent attention to detail
Excellent organizational and time management skills
Relevant cybersecurity certification (CISSP, CISM, CGRC, CISA, or similar)
Experience with formal change management processes
Experience working in DOD or Intelligence Community cybersecurity programs
Understanding of cybersecurity risk and governance considerations associated with emerging technologies
Demonstrated ability to quickly grasp new technical concepts and integrate new information into existing plans and frameworks

Responsibilities

Developing new cybersecurity governance documentation including policies, plans, procedures, processes, forms, and diagrams
Working with client leadership, program managers, and engineering personnel to gather governance requirements
Working with internal and external stakeholders to review and revise draft documentation
Identifying and recommending policy and process improvements to the GRC manager
Updating existing cybersecurity governance documentation to incorporate improvements and maintain currency
Translating technical cybersecurity and network operations information into language to be understood by leadership and non-technical audiences
Communicating cybersecurity governance updates to stakeholders
Assisting with the implementation of new cybersecurity governance processes

Benefits

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend