Risk Management Support Lead

Expression•Washington, DC

1d•$125,000 - $150,000

About The Position

Expression is seeking a highly experienced Risk Management Support Lead to run authority for operational risk management, IT governance, and Risk Management Framework (RMF) coordination supporting DCSA enterprise IT operations. This position is responsible for establishing and maintaining an integrated risk management program that proactively identifies, assesses, mitigates, and communicates operational, cybersecurity, and program risks affecting mission execution. You will own the enterprise Risk Register and provide executive-level visibility into the organization's operational risk posture to support informed decision-making and mission resilience. Clearance Required: Active Secret clearance with eligibility for TS/SCI.

Requirements

Bachelor's degree from an accredited college or university. A degree in Information Technology, Telecommunications, Engineering, Computer Science, or a closely related technical discipline is preferred.
Minimum of 10 years of project management experience.
Minimum of 7 years supporting Risk Management Framework (RMF), cybersecurity governance, or enterprise risk management.
PMP certification
DoD 8570/8140 IAM Level III certification.
CISSP or Certified Authorization Professional (CAP) certification.
Demonstrated experience managing enterprise IT risk programs supporting DoD or Federal agencies.
Experience developing executive risk dashboards and governance reporting.
Experience leading enterprise compliance and audit readiness initiatives.
Active Secret clearance with eligibility for TS/SCI.

Nice To Haves

Experience supporting DCSA or Intelligence Community environments.
Experience with NIST RMF, NIST SP 800-53, and DoD cybersecurity policies.

Responsibilities

Lead enterprise IT operational risk management activities.
Develop and maintain the enterprise Risk Register.
Coordinate risk identification, assessment, mitigation, and reporting across all task areas.
Support RMF activities and security governance processes.
Provide executive-level risk reporting and recommendations to Government leadership.
Ensure projects and operational services comply with cybersecurity and risk management requirements.
Facilitate risk reviews and governance meetings.
Analyze operational trends to identify emerging risks.
Coordinate with task leads to ensure effective mitigation strategies are implemented.
Escalate significant operational and cybersecurity risks as appropriate.
Promote continual improvement of organizational risk management processes.