Strategic GRC & Risk Lead for Federal RMF

Accenture PLC; Oregon; Hybrid; USD 110,000 - 224,000; Full time

Job summary

Accenture Federal Services in the United States seeks a seasoned GRC leader to drive risk governance and compliance for a large federal cybersecurity contract. You will own the enterprise risk register, manage the POA&M lifecycle, and oversee the GRC platform configuration and reporting.

This role mentors a small team of GRC analysts, collaborates with technical and operational teams, and communicates risk posture to senior leaders while ensuring alignment with RMF, FISMA, and NIST controls.

Qualifications

• 5 years of federal risk management experience.
• Bachelor's degree in Information Technology, Cybersecurity, Business, or related field (equivalent experience considered).
• Experience with FISMA, NIST 800-53, NIST 800-37.
• Experience with GRC platforms (ServiceNow GRC, Xacta, RSA Archer).
• Ability to present risk information to leadership.

Responsibilities

• Own and maintain the enterprise risk register, including risk identification, scoring, and mitigation tracking.
• Manage the POA&M lifecycle end‑to‑end — from identification to remediation planning, tracking, and closure validation.
• Administer the GRC platform, including workflow configuration, control mapping, and evidence collection automation.
• Lead supply chain and third‑party risk assessments for new vendors, tools, and system integrations.
• Build and maintain risk dashboards and reporting for program and client leadership.
• Support continuous authorization (cATO) activities and periodic security control assessments.
• Develop and maintain risk management policies, procedures, and standard operating procedures.
• Coordinate with technical and operational teams to ensure risk findings translate into actionable remediation.
• Lead and mentor a small team of GRC analysts, providing quality review and professional development.

Skills

Federal RMF experience

Strong analytical skills

Strong communication with leadership

Education

Bachelor's degree in IT/Cybersecurity/Business

Tools

ServiceNow GRC

Xacta

RSA Archer

Job description

Accenture Federal Services in the United States seeks a seasoned GRC leader to drive risk governance and compliance for a large federal cybersecurity contract. You will own the enterprise risk register, manage the POA&M lifecycle, and oversee the GRC platform configuration and reporting.

This role mentors a small team of GRC analysts, collaborates with technical and operational teams, and communicates risk posture to senior leaders while ensuring alignment with RMF, FISMA, and NIST controls.