Cybersecurity Governance and Risk Management (GRC) Lead

ERP International; Laurel (MD); Remote; USD 165,000 - 210,000; Full time

Benefits offered by this job

Health, Dental, Vision, Retirement

Health Advocate & Concierge

Training & Development

Employee Recognition & Incentives

Company Sponsored Events

Leading edge technology exposure

Community Outreach

Job summary

ERP International, LLC in Laurel, MD, is seeking a Full Time Cybersecurity Governance and Risk Management (GRC) Lead to support federal health and government clients. You will drive governance, risk management, control assessments, and audit readiness across the program, reporting to senior stakeholders.

The role emphasizes collaboration with technical teams and executives, delivering risk insights, policy development, and continuous improvement in a highly regulated environment.

Qualifications

• 7+ years in cybersecurity, governance, compliance, auditing, or risk management.
• 3+ years leading governance, compliance, risk management, or cybersecurity oversight.
• Experience in federal/healthcare/defense/financial services or other highly regulated environments.
• Knowledge of NIST RMF, Enterprise Risk Management, governance, compliance assessments, and audit readiness.

Responsibilities

• Support enterprise cybersecurity governance and compliance programs.
• Conduct security control assessments and risk analyses.
• Review and maintain security authorization documentation.
• Support implementation of NIST, FISMA, and agency cybersecurity requirements.
• Assist with continuous monitoring, vulnerability management, and remediation tracking.
• Develop executive reports, dashboards, and risk briefings.
• Coordinate with technical teams, security stakeholders, and executive leadership.
• Evaluate cybersecurity processes and recommend improvements.
• Support cybersecurity modernization and transformation initiatives.

Skills

NIST RMF

Enterprise Risk Management

Cybersecurity Governance

Compliance Assessments

Audit Readiness

Policy Development

Security Metrics

Stakeholder Engagement

Analytical Skills

Communication

Education

Bachelor's degree

Job description

Overview

We appreciate your interest in becoming part of our team. Although this requisition does not apply to a specific immediate opening , we value proactive candidates like yourself who are looking to build a meaningful career with ERP International. We will keep your application on file and contact you when suitable opportunities arise. (Applying for the future openings posting does not guarantee employment).

Location

Remote (U.S.) | Occasional Travel May Be Required

ERP International, LLC ( www.erpinternational.com ) is currently seeking a Full Time Cybersecurity Governance and Risk Management (GRC) Lead to support the Centers for Medicare & Medicaid Services. Qualified candidates are urged to apply to learn more about this great opportunity! The successful candidate will provide strategic and operational support across cybersecurity program management, control assessments, continuous monitoring, audit readiness, risk analysis, policy development, and stakeholder engagement activities in highly regulated environments.

Be the Best! ERP International is honored to be named a 2026 Top Workplace by WTOP News! 7 Years Running.

ERP Offers Employees:

• Competitive Salaries & Benefits to include Health, Dental, Vision and Retirement!
• Health Advocate & Concierge Services!
• Unlimited Job- Related Training & Development!
• Employee Recognition & Incentive Programs!
• Employee Appreciation & Company Sponsored Events!
• Opportunity to work with leading edge technology!
• Community Outreach & Charity Work!

ERP is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment on the basis of race, color, sex, religion, national origin, veteran status, disability status, age, or any other characteristic protected by federal, state, or local law.

ERP International is committed to providing veteran employment opportunities to our service men and women.

Pay Range

$165,000 – $210,000

The salary range for this position is determined based on a variety of factors, including but not limited to, experience, qualifications, skill level, and location. The final salary offer will fall within this range and will be commensurate with the candidate’s background and the specific demands of the role.

About ERP International, LLC

ERP is a nationally respected provider of health, science, and technology solutions supporting clients in the government and commercial sectors. We provide comprehensive enterprise information technology, strategic sourcing, and management solutions to DoD and federal civilian agencies in 40 states. Founded in 2006, ERP is headquartered in Laurel, MD and maintains satellite offices in Montgomery, AL and San Antonio, TX - plus project locations nationwide.

Responsibilities

Job Specific Details and Tasks

• Support enterprise cybersecurity governance and compliance programs.
• Conduct security control assessments and risk analyses.
• Review and maintain security authorization documentation.
• Support implementation of NIST, FISMA, and agency cybersecurity requirements.
• Assist with continuous monitoring, vulnerability management, and remediation tracking.
• Develop executive reports, dashboards, and risk briefings.
• Participate in audit readiness and compliance activities.
• Coordinate with technical teams, security stakeholders, and executive leadership.
• Evaluate cybersecurity processes and recommend improvements.
• Support cybersecurity modernization and transformation initiatives.

Qualifications

Minimum Qualifications

• 7+ years of cybersecurity, governance, compliance, auditing, risk management, or related experience.
• 3+ years leading governance, compliance, risk management, or cybersecurity oversight activities.
• Experience supporting federal, healthcare, defense, financial services, or other highly regulated environments.
• Experience with:
• NIST Risk Management Framework
• Enterprise Risk Management
• Cybersecurity Governance
• Compliance Assessments
• Audit Readiness
• Policy Development
• Security Metrics and Reporting
• Strong analytical, communication, and stakeholder engagement skills.

Education

• Bachelor's degree in Cybersecurity, Information Systems, Public Policy, Business Administration, Computer Science, or related discipline.

License/Certification and Training

Desired Certifications

• One or more of the following:
• CISSP
• CISM
• CRISC
• CGRC
• CISA
• PMP
• ITIL
• Security Desired Experience:
• Experience supporting enterprise cybersecurity transformation initiatives.
• Experience working with executive governance organizations or leadership councils.
• Experience supporting privacy programs or data governance initiatives.
• Experience developing cybersecurity maturity assessments and improvement roadmaps.
• Experience supporting cloud governance, Zero Trust, or enterprise modernization efforts.
• Experience supporting large-scale federal technology or business transformation programs.

Clearance Requirements

• Must be able to obtain a government public trust Clearance/background check

Standard Interview & Selection Process

• Recruiter Pre-Screen
• If selected, Interview with Hiring Manager and/or Technical Lead

Job Locations

US-MD-Laurel

ERP International is committed to hiring and retaining a diverse workforce. ERP is an equal opportunity/affirmative action employer and does not discriminate on the basis of race, color, creed, sex, national origin, religion, age, disability, pregnancy or veteran status. We welcome the employment of women, minorities, veterans and individuals with disabilities in our workforce. If you are in need of special assistance, please contact our Human Resources Department. Interested parties may view our Affimative Action Plan for Veterans and Individuals with Disabilities by contacting the Human Resources Department. ERP participates in E-Verify.