Federal GRC & Risk Lead - RMF/NIST Expert

VulnU; Washington (District of Columbia); On-site; USD 110,000 - 224,000; Full time

Job summary

Accenture Federal Services in Washington, DC, seeks a GRC & Risk Management Lead to drive a continuous governance, risk, and compliance program for a large federal cybersecurity contract.

You will own the enterprise risk register, manage the POA&M lifecycle, administer the GRC platform, lead third-party risk assessments, and build dashboards for executive leadership while mentoring a small team.

Qualifications

• 5 years of federal risk management experience, including direct experience applying the NIST RMF.
• Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field.
• CRISC or CISM required; CISSP or CGRC preferred.

Responsibilities

• Own and maintain the enterprise risk register, including risk identification, scoring, and mitigation tracking.
• Manage the POA&M lifecycle end-to-end—from identification to remediation planning, tracking, and closure validation.
• Administer the GRC platform, including workflow configuration, control mapping, and evidence collection automation.
• Lead supply chain and third-party risk assessments for new vendors, tools, and system integrations.

Skills

GRC

RMF

NIST 800-53

FISMA

Executive reporting

Education

Bachelor's degree in IT or related field

Tools

ServiceNow GRC

Xacta

RSA Archer

Job description

Accenture Federal Services in Washington, DC, seeks a GRC & Risk Management Lead to drive a continuous governance, risk, and compliance program for a large federal cybersecurity contract.

You will own the enterprise risk register, manage the POA&M lifecycle, administer the GRC platform, lead third-party risk assessments, and build dashboards for executive leadership while mentoring a small team.