Senior Security Risk Manager - A&A, FISMA & Cloud

SIERTEK LTD; Washington (District of Columbia); On-site; USD 140,000 - 200,000; Full time

Job summary

SierTeK Ltd. is seeking a Senior Security Risk Management Subject Matter Expert to support a Washington, DC opportunity. The role focuses on risk management operations, including A&A, continuous monitoring, and FISMA compliance for cloud and hybrid environments.

Ideal candidates have 10+ years of security-related experience, with 2+ years in A&A, FISMA, policy standards, and cloud security. Certifications such as CISM, CAP, or GRC are required or demonstrable equivalents.

Qualifications

• At least 10 years total related experience and must include at least 2 years in A&A, FISMA, IC cybersecurity policy and standards, continuous monitoring, Cross Domain Solutions, and secure cloud/hybrid engineering.
• Required: CISM, CAP, or GRC Certification, or comparable demonstrable experience; Desired: AWS, Azure, and Microsoft 365 cloud platforms.

Responsibilities

• Drive complex security risk management operations, including Assessment and Authorization (A&A) and continuous monitoring.
• Apply NIST 800-series and CNSSI 1253 security controls to secure cloud and hybrid environments.
• Support FISMA compliance for the agency and implement emerging risk management practices.

Skills

Security risk management

A&A

FISMA compliance

CNSSI 1253

Continuous monitoring

Cloud security

Education

CISM CAP GRC certification

10+ years related experience

Job description

SierTeK Ltd. is seeking a Senior Security Risk Management Subject Matter Expert to support a Washington, DC opportunity. The role focuses on risk management operations, including A&A, continuous monitoring, and FISMA compliance for cloud and hybrid environments.

Ideal candidates have 10+ years of security-related experience, with 2+ years in A&A, FISMA, policy standards, and cloud security. Certifications such as CISM, CAP, or GRC are required or demonstrable equivalents.