GRC / Risk Management Lead

The role

This role leads a continuous governance, risk, and compliance program for a large federal cybersecurity contract. You will manage the enterprise risk register, the POA&M lifecycle, and GRC platform administration.

What you will do

• Own and maintain the enterprise risk register, including risk identification, scoring, and mitigation tracking.
• Manage the POA&M lifecycle end-to-end.
• Administer the GRC platform, including workflow configuration, control mapping, and evidence collection automation.
• Lead supply chain and third-party risk assessments for new vendors, tools, and system integrations.
• Build and maintain risk dashboards and reporting for program and client leadership.
• Support continuous authorization (cATO) activities and periodic security control assessments.
• Develop and maintain risk management policies, procedures, and standard operating procedures.
• Coordinate with technical and operational teams to ensure risk findings translate into actionable remediation.
• Lead and mentor a small team of GRC analysts.

Required qualifications

• 5 years of federal risk management experience, including direct experience applying the NIST Risk Management Framework (RMF).
• Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field (equivalent experience considered in lieu of a degree).
• Strong knowledge of FISMA, NIST 800-53, NIST 800-37, and related federal compliance frameworks.
• Experience with GRC platform administration (e.g., ServiceNow GRC, Xacta, RSA Archer, or similar).
• Strong analytical and communication skills, with experience presenting risk information to leadership.
• CRISC or CISM required.
• Active Secret or higher security clearance

Nice to have

• CISSP
• CGRC (formerly CAP)

Benefits

• hands-on experience
• certifications
• industry training

Before you apply

• Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.
• Candidates who are currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration.

About the company

Accenture Federal Services is a technology company within global Accenture that helps the US federal government. Its 13,000+ people pursue technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.