Senior Cyber Risk & Compliance Leader

Bechtel; Reston (VA); Hybrid; USD 123,000 - 204,000; Full time

Benefits offered by this job

Medical, dental, vision plans

Discretionary bonuses

401K with matching and profit sharing

Job summary

Bechtel in Reston, VA is seeking a senior cybersecurity risk leader to drive enterprise risk management, policy development, and remediation across IT and business units. You will define risk metrics, oversee governance, and champion AI-enabled improvements.

The role requires strong communication to executives, experience with ServiceNow GRC, and the ability to translate complex risk into actionable guidance for decision makers. This is a hybrid role based in Reston, VA.

Qualifications

• Experience establishing, maturing, or leading cybersecurity risk management programs, including governance, assessments, and executive reporting.
• Knowledge of ISO 27001, NIST, CIS, PCI, SOX, GDPR and related frameworks.
• Ability to translate risk information into clear, actionable guidance for decision makers.
• Experience with ServiceNow GRC and analytics tools.

Responsibilities

• Lead enterprise cybersecurity risk management activities, including risk assessments and remediation planning.
• Embed risk-informed decision-making across cybersecurity, IT, legal, and business units.
• Define metrics and reports to communicate risk posture to leadership.
• Apply AI/automation to improve risk processes and analytics.

Skills

Cybersecurity risk management

Policy development

Executive reporting

Cross-functional collaboration

Independent judgment

Education

Bachelor's degree or international equivalent

Tools

ServiceNow GRC

Power BI

Tableau

Job description

Bechtel in Reston, VA is seeking a senior cybersecurity risk leader to drive enterprise risk management, policy development, and remediation across IT and business units. You will define risk metrics, oversee governance, and champion AI-enabled improvements.

The role requires strong communication to executives, experience with ServiceNow GRC, and the ability to translate complex risk into actionable guidance for decision makers. This is a hybrid role based in Reston, VA.