Strategic Cyber Risk Lead & Mitigation Architect

asmexternalcareersite; Ashburn (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

ASM Research seeks a skilled information assurance professional to identify and communicate cyber risks at tactical and strategic levels across the IT environment. You will develop RARs/CRRMs and support C-CARM throughout the acquisition lifecycle, while maintaining risk dashboards for leadership visibility.

The role requires 7+ years of cybersecurity/risk mgmt experience, a relevant degree, and US citizenship with ability to pass a federal background check.

Qualifications

• Bachelor’s degree in information assurance, computer science, or a related field.
• 7+ years of professional experience in information assurance, cybersecurity, risk management, or compliance.
• One of the following certifications: CompTIA Security+; ISC2 CISSP; ISACA CISM; ISACA CRISC; GIAC GCED; CompTIA CEH

Responsibilities

• Lead identification and communication of cyber risks across the IT environment.
• Develop and review Risk Assessment Reports (RARs) and Cyber Risk Recommendation Memos (CRRMs).
• Support Component Cyber Acquisition Risk Management (C-CARM) through Acquisition Lifecycle Framework.
• Maintain a near real-time risk management dashboard and CSD risk register for senior management visibility.
• Provide briefings to senior management on the agency's cyber risk posture.

Skills

Risk assessment

Executive briefings

Threat awareness

Cyber risk management

Education

Bachelor’s Degree in Information Assurance or related field

Tools

MITRE ATT&CK

NIST RMF

NIST CSF

NIST SP 800-53

POA&Ms management

Enterprise Logging System

Security policy drafting

Job description

ASM Research seeks a skilled information assurance professional to identify and communicate cyber risks at tactical and strategic levels across the IT environment. You will develop RARs/CRRMs and support C-CARM throughout the acquisition lifecycle, while maintaining risk dashboards for leadership visibility.

The role requires 7+ years of cybersecurity/risk mgmt experience, a relevant degree, and US citizenship with ability to pass a federal background check.