Enterprise Cyber Risk & Compliance Strategist

CompQsoft Inc; New York (NY); Hybrid; USD 120.000 - 160.000; Vollzeit

Zusammenfassung

CompQsoft Inc. is seeking a senior role to drive enterprise cybersecurity risk management by translating compliance into strategic advantage.

You will quantify risks, assess control effectiveness, and align with NIST 800-53 and FISMA, partnering with Cybersecurity Engineers and Analysts to prioritize remediation and track top cyber risks. The role focuses on security governance, POA&M lifecycle, risk register oversight, and creating awareness programs to reduce human-centric risks while

Qualifikationen

• Drive enterprise cybersecurity risk management by transforming compliance into a strategic advantage.
• Quantify risks, assess control effectiveness, and align with NIST 800-53 and FISMA frameworks.
• Collaborate with Cybersecurity Engineers and Business Analysts to define compliance guardrails, prioritize remediation, and track key cyber risks.
• Conduct enterprise-wide risk assessments, audits, and user awareness programs to improve security posture.

Aufgaben

• Lead enterprise-wide risk assessments using GRC methodologies to identify and prioritize risks.
• Translate technical vulnerabilities into business impact for stakeholders.
• Ensure ongoing compliance with federal frameworks through periodic audits and Security Impact Analyses.
• Maintain and manage the enterprise POA&M lifecycle and the risk Register within SLAs.
• Monitor and report critical cyber risks using dashboards and metrics for leadership.
• Design and implement security awareness programs and phishing simulations to reduce risk.
• Collaborate to define compliance guardrails and prioritize remediation by risk impact.
• Use Archer and ServiceNow with Power BI and Excel to generate automated risk metrics.

Kenntnisse

GRC

TPRM

NIST 800-53

RMF

POA&M

Risk assessment

Analytics

Stakeholder comms

Tools

Archer

ServiceNow

Power BI

Excel

JIRA

Jobbeschreibung

CompQsoft Inc. is seeking a senior role to drive enterprise cybersecurity risk management by translating compliance into strategic advantage.

You will quantify risks, assess control effectiveness, and align with NIST 800-53 and FISMA, partnering with Cybersecurity Engineers and Analysts to prioritize remediation and track top cyber risks. The role focuses on security governance, POA&M lifecycle, risk register oversight, and creating awareness programs to reduce human-centric risks while