Cybersecurity Risk, Managing Consultant

Jobtailor; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor in Washington, DC seeks a senior cybersecurity risk leader to oversee management, governance, and risk assessments for high-value assets. You will guide workstreams, coordinate risk activities, and advise on federal frameworks.

The role requires an active clearance, CISSP/CRISC/CAP or similar, and deep knowledge of NIST standards, OMB directives, and government risk programs. You will report findings to both technical and executive audiences.

Qualifications

• Active and current Secret federal security clearance.
• Bachelor’s degree or Master’s degree with relevant experience.
• 7 years of cybersecurity experience, or 5 years with a Master’s Degree.
• US Citizenship required and strong report writing skills.
• CISSP, CRISC, CAP/CGRC, CISA or equivalent certification.
• Experience with risk assessments, governance, and HVA oversight.

Responsibilities

• Oversee and lead cybersecurity risk management, governance, assessments, and HVA oversight.
• Maintain and improve the enterprise risk register and plans.
• Coordinate enterprise risk assessments across units and stakeholders.
• Advise on federal frameworks and incorporate them into evaluations.
• Present complex risk findings to technical and executive audiences.

Skills

Cybersecurity Risk Management

Risk Assessments

Verbal Communication

Written Communication

Client-Facing Management

Strategic Guidance

Project Management

Education

Bachelor's Degree

Master's Degree +5 years experience

Tools

NIST IR 8286

NIST SP 800-171

NIST SP 800-60

NIST SP 1800-39A

FIPS 140-3

FIPS 199

Job description

• Oversee, manage, and lead cybersecurity risk management, risk governance, risk assessments, and high-value asset oversight and assessments


• Maintain and improve the enterprise-level risk register


• Coordinate and plan enterprise and organizational unit risk assessments


• Oversee specified technology risk assessments and HVA oversight program functions


• Provide strategic direction and guidance to workstream team leads and support cross-training


• Review and advise on deliverables and perform QA/QC for all workstreams


• Advise on and incorporate federal cybersecurity frameworks into evaluations and assessments


• Develop, maintain, and provide input on agency-wide cybersecurity policies, procedures, and documentation


• Prepare and update risk management and HVA-related plans, SOPs, and project schedules


• Provide expert guidance to system owners, analysts, and leadership on cybersecurity best practices


• Lead discussions with agency stakeholders and provide standardized technical assistance


• Present complex risk assessment and HVA assessment findings and recommendations to technical and executive audiences


• Prepare briefing materials for weekly reports and specific audiences


• Advise on assessment severity and recommend courses of action to government stakeholders


• Collaborate with internal teams and external stakeholders, including CISA and the Department of State

Requirements

• Active and current Secret federal security clearance


• Bachelor’s Degree from an accredited university, or a Master’s Degree and five years of relevant experience


• Seven years of relevant cybersecurity experience, or five years with a Master’s Degree


• US Citizenship is required


• Excellent verbal and written communication skills, specifically in report writing


• Certification in CISSP, CRISC, CAP/CGRC, CISA, or another relevant certification


• Experience with cybersecurity risk assessments, risk governance, and high-value asset oversight


• Familiarity with federal cybersecurity mandates, including CISA and OMB Directives


• Knowledge of NIST guidance and principles related to risk management and risk assessment


• Familiarity with NIST IR 8286, SP 800-171, SP 800-60, SP 1800-39A, FIPS 140-3, and FIPS 199


• Familiarity with project management techniques and methodologies


• Ability to present complex findings to technical and executive audiences


• Experience consulting at large federal agencies and on cybersecurity audits and/or IT controls is nice to have


• Demonstrated external client-facing management and/or consulting experience for large firms is nice to have

Core Competencies

Demonstrates expertise in cybersecurity risk management, including risk assessments and governance, while providing strategic guidance and oversight for high-value asset programs. Proficient in developing and maintaining cybersecurity policies and procedures aligned with federal frameworks and mandates.

Highest-signal resume keywords

• Cybersecurity Risk Management


• Risk Assessments


• CISSP Certification


• NIST Guidance Familiarity


• Excellent Communication Skills

ATS Optimization Keywords

Hard Skills

• Risk Governance


• High-Value Asset Oversight


• Cybersecurity Audits


• Project Management Techniques


• Federal Cybersecurity Frameworks

Soft Skills

• Verbal Communication


• Written Communication


• Client-Facing Management

Certifications & Qualifications

• CISSP


• CRISC


• CAP


• CGRC


• CISA

Industry Keywords

• Federal Cybersecurity Mandates


• CISA


• OMB Directives


• Risk Management


• Risk Assessment

Tools & Technologies

• NIST IR 8286


• NIST SP 800-171


• NIST SP 800-60


• NIST SP 1800-39A


• FIPS 140-3


• FIPS 199