GRC Lead: CIO Enterprise Risk Management

Pueo Business Solutions LLC; McLean (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Pueo Business Solutions LLC is seeking a GRC Lead to oversee the CIO Enterprise Risk Management Working Group, providing senior-level program management, governance policy development, and stakeholder coordination for enterprise cybersecurity risk decisions.

The role partners with CIO-4/5 leadership, CRO, and risk owners, establishing risk tolerance, escalation protocols, and executive reporting to drive consistent risk management across the agency.

Qualifications

• Twelve (12) years of relevant experience in program management, risk management, or cybersecurity governance.
• Five (5) years of experience managing enterprise-level governance programs.
• Experience coordinating cross-directorate or cross-functional stakeholders.
• Certifications such as PMP, CRISC, CGRC, CISSP, CISM are preferred.

Responsibilities

• Lead implementation and maturation of the CERMS WG Charter and risk governance framework.
• Provide strategic program management and oversight for enterprise cybersecurity risk management.
• Coordinate with CIO-5 Strategy & Programs Office on strategic risk management priorities.
• Develop and maintain comprehensive project plans, milestones, action items, and implementation schedules.
• Provide recurring program status, risk, and performance reporting to CIO-4 leadership.

Skills

Program Management

Enterprise Risk Management

Cybersecurity Governance

Policy Development

Risk Tolerance Frameworks

Stakeholder Management

Executive Reporting

Governance Documentation

Education

Bachelor's degree in Business Administration, Information Systems, Cybersecurity

Job description

Pueo Business Solutions LLC is seeking a GRC Lead to oversee the CIO Enterprise Risk Management Working Group, providing senior-level program management, governance policy development, and stakeholder coordination for enterprise cybersecurity risk decisions.

The role partners with CIO-4/5 leadership, CRO, and risk owners, establishing risk tolerance, escalation protocols, and executive reporting to drive consistent risk management across the agency.