Cyber Security Risk Lead

Job Summary

Leading cybersecurity risk and compliance activities, the full-time Cyber Security Risk Lead will manage A&A processes, maintain security authorizations, and coordinate with VA stakeholders in a hybrid work environment.

Key responsibilities

• Manage ATO activities, authorization status, security risks, and POA&M activities across supported products
• Develop and maintain A&A artifacts in accordance with NIST RMF and applicable VA security requirements
• Lead vulnerability tracking, risk assessments, and security compliance activities while supporting privacy and security requirements for cloud and integrated systems

Required qualifications

• 8+ years of information security experience, including 4+ years in roles such as ISSO, ISSM, or A&A lead supporting federal IT programs
• Demonstrated experience authoring and maintaining complete A&A packages under the NIST Risk Management Framework
• Hands-on experience managing POA&Ms, security control evidence, and federal GRC activities
• Experience with vulnerability management and security risk assessments
• ISC2 CISSP certification required; ISACA CISM and GIAC GSLC must be obtained within 12 months of hire