Cyber and IT Risk Management Specialist

We are seeking a highly skilled Cyber and IT Risk Management Specialist to implement and maintain the Network Services Information Assurance Program. The successful candidate will ensure security controls function correctly, standardize templates and processes, and participate in NIH and CIT security working groups. Responsibilities: Implement the Network Services Information Assurance Program Standardize templates, processes, and policies in alignment with NIH and HHS guidance Participate in NIH and CIT security working groups Lead development and maintenance of security documentation Conduct annual risk assessments, security impact analyses, and support incident response Oversee ATO-related activities for Network Services Maintain technical security documentation Conduct continuous monitoring, vulnerability assessment, and compliance reviews Manage and track remediation activities and waiver documentation Deliverables: Conduct assessments of controls Collaborate with Technical SME (Subject Matter Experts) to capture requirements Maintain system information security compliance Conduct review of accounts Produce weekly, monthly and quarterly status reports Support agency audits Review cybersecurity posture and operational dashboards Communicate noteworthy risks or threats to the program and customer executives Lead coordination meetings with security teams and stakeholders Oversee modernization and cloud-related security tasks Establish standards and metrics for cybersecurity reporting Participate in governance committees Conduct quarterly risk register reviews Oversee testing activities including penetration tests Support annual enterprise risk assessments and updates to governance materials Requirements: BS degree in Computer Science, Information Systems or equivalent experience (15+ years) One or a combination of the following certifications: Security+, CAP, CISSP, CISA, CEH In-depth knowledge of Federal security policies, standards, guidelines, and NIST frameworks Experience in requirements analysis, mitigation and control implementation Ability to obtain a Public Trust Desired Skills: Experience with FISMA, RMF, and the NIST SP 800 series Hands-on vulnerability management experience Project management experience Ability to produce high-quality deliverables and manage deadlines Strong analytical and communication skills Ability to work independently and collaborate with diverse teams Job Data by YubHub .