GRC / Risk Management Lead

Accenture Federal Services • Washington, DC

3d • $109,500 - $224,200

About The Position

The GRC / Risk Management Lead leads a continuous governance, risk, and compliance program for a large federal cybersecurity contract. The role manages the enterprise risk register and the full Plan of Action and Milestones (POA&M) lifecycle, from identification through remediation validation. It also administers the GRC platform, leads supply chain and third-party risk assessments, and builds and maintains executive risk dashboards.

The position supports continuous authorization (cATO) activities and periodic security control assessments, develops and maintains risk management policies and procedures, and coordinates with technical and operational teams to turn findings into actionable remediation. The lead also manages and mentors a small team of GRC analysts.

Accenture Federal Services describes a collaborative workplace with opportunities to grow and learn through hands-on experience, certifications, and industry training. The posted base pay range for specified locations is $109,500–$224,200 USD.

Requirements

• Five years of federal risk management experience, including direct experience applying the NIST Risk Management Framework (RMF).
• Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field; equivalent experience may be considered in lieu of a degree.
• Strong knowledge of FISMA, NIST 800-53, NIST 800-37, and related federal compliance frameworks.
• Experience administering a GRC platform, such as ServiceNow GRC, Xacta, RSA Archer, or similar.
• Strong analytical and communication skills, with experience presenting risk information to leadership.
• CRISC or CISM certification required.
• Applicants for employment in the US must have work authorization that does not now or in the future require visa sponsorship.

Nice To Haves

• CISSP or CGRC (formerly CAP) certification preferred.

Responsibilities

• Own and maintain the enterprise risk register, including risk identification, scoring, and mitigation tracking.
• Manage the POA&M lifecycle end-to-end, from identification through remediation planning, tracking, and closure validation.
• Administer the GRC platform, including workflow configuration, control mapping, and evidence collection automation.
• Lead supply chain and third-party risk assessments for new vendors, tools, and system integrations.
• Build and maintain risk dashboards and reporting for program and client leadership.
• Support continuous authorization (cATO) activities and periodic security control assessments.
• Develop and maintain risk management policies, procedures, and standard operating procedures.
• Coordinate with technical and operational teams to ensure risk findings translate into actionable remediation.
• Lead and mentor a small team of GRC analysts, providing quality review and professional development.

Benefits

• Hands-on experience, certifications, and industry training and other opportunities to grow and learn; a specific benefits list is not provided in the posting.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior