Governance, Risk, and Compliance Lead

Description:

Quantum Sky is searching for a dynamic Governace, Risk and Compliance Lead to support our Federal Customer in Washington, DC.

 

Responsibilities:

• Serve as a trusted advisor to the CISO and Deputy CISO providing authoritative, expert-level counsel on information assurance, compliance frameworks, and cybersecurity strategy.
• Represent the Department in working groups and cybersecurity committees that are tackling the government’s current and emerging challenges such as maturing the CDM program, automating the ATO process, and developing and implementing enterprise security services.
• Lead the development of the Department’s program for identifying, protecting, and monitoring its High-Value Assets (HVAs).
• Oversee day-to-day information system compliance operations, managing risk escalation paths and mentoring assessment teams providing advanced assistance.
• Steer complex risk assessments and security audits across sensitive operational environments, establishing remediation frameworks to address vulnerabilities systematically.
• Lead comprehensive security authorizations (A&A), analyses, and compliance evaluations within highly classified and sensitive environments.
• Develop requirements and specifications for reviewing and approving procurement requests, major systems development activities, telecommunications hardware and software, and hardware and software encryption techniques on the basis of security concerns.
• Broadly assess technology to ensure security vulnerabilities are identified and remediated.
• Drive capacity planning and system optimization reviews, ensuring resource utilization and network performance align with a hardened, compliant security posture.
• Provide Automated Indicator Sharing (AIS) and client network guidance, training, research and recommendations.
• Support specific technical reviews to support non-standard operational requirements and systems, including design, development, and maintenance of unique security assessment security tools and conducting assessments.

Qualifications:

Required:

• Bachelor’s Degree or an equivalent combination of formal education and experience. Bachelor's Degree may be substituted for 4 additional years of relevant experience.
• Minimum 8 years of general experience and 6 years of relevant experience in functional responsibility.
• Knowledge of cybersecurity threats. Knowledge of information system technologies. Experience with online research techniques.
• Well-versed in risk management and must have experience working with SDLC and performing security tasks throughout.
• Experience with and working understanding of FISMA compliance, experience conducting all phases of Certification and Accreditation, and creating documentation in accordance with NIST guidance.
• Well-versed with NIST publications, including NIST 800 series, OMB circulars such as OMB A-123 circular and OMB A-130 circular and memoranda, and CNSS publications and their requirements and impact on system security such as CNSS 1253 and risk management methodologies.
• Strong analytical and organizational skills
• Concise writing skills.
• CISSP required.

Desired:

• Understanding of and experience with CSAM is a plus

Clearance:

• Active Top Secret required

Location:

• Washington DC

About Quantum Sky:

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $165,000-$185,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits: