Enterprise Cyber Risk Lead - Remote

SkyePoint Decisions; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

PTO

Floating federal holidays

Health insurance options

Dental/Vision plans

401k matched

Certification incentive program

Job summary

SkyePoint Decisions seeks a Cyber and Risk Management Lead to guide enterprise IT and cybersecurity risk programs for a federal customer. You will direct risk assessments, maintain risk registers, and produce executive risk reports. Requires 10+ years of experience and CISSP or equivalent, with active clearance preferred.

Remote role with responsibilities spanning risk identification, scoring, mitigation tracking, and governance across divisions. U.S. citizenship is required.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Risk Management, or a related discipline.
• 10+ years of enterprise risk management, cybersecurity/IT risk, information assurance, governance, compliance, or related experience.
• Senior professional certification such as CISSP or equivalent.

Responsibilities

• Lead recurring enterprise and division risk assessments with stakeholders; identify strategic, operational, reporting, compliance, technology, and cybersecurity risks.
• Maintain the enterprise risk register; apply likelihood/impact scoring; establish KRIs/KPIs and monitor mitigation actions.
• Develop Risk Assessment Reports (RARs), ERM dashboards, and executive risk reporting highlighting exposure, trends, and actions.
• Evaluate policies, processes, controls, audits, and compliance to identify weaknesses and gaps; coordinate risk owners and process owners to implement actions.
• Provide ERM guidance, templates, tools, and deadlines to stakeholders to ensure consistent risk identification, scoring, and reporting.
• Improve ERM procedures, dashboards, workflows, and automation; benchmark against COSO ERM, ISO 31000, and Federal requirements; integrate compliance risks into RARs.

Skills

Risk management leadership

Enterprise risk assessment

COSO ERM knowledge

ISO 31000 knowledge

CISSP or equivalent

Security risk assessment tools

Education

Bachelor’s degree in Cybersecurity/Information Systems/Engineering

Job description

SkyePoint Decisions seeks a Cyber and Risk Management Lead to guide enterprise IT and cybersecurity risk programs for a federal customer. You will direct risk assessments, maintain risk registers, and produce executive risk reports. Requires 10+ years of experience and CISSP or equivalent, with active clearance preferred.

Remote role with responsibilities spanning risk identification, scoring, mitigation tracking, and governance across divisions. U.S. citizenship is required.