Senior Consultant - Cybersecurity Risk

Lead a cybersecurity risk management and risk governance workstream within an agency Oversee, manage, and lead development and execution of cybersecurity risk governance Maintain and improve the enterprise-level risk register Oversee technology risk assessments, including Tier 1 assessments supporting Technology Review Board decisions Prepare risk acceptance memoranda for CISO and CIO approval Conduct limited FOCI-style assessments to support agency decision‐making Interpret and adapt guidance for Tier 1 enterprise risk assessments Scope technology risk assessments, confirm outputs and required elements, and prepare decision‑support deliverables Prepare plans and goals to improve the cyber risk register and support agency cyber risk profiles Prepare and implement corrective action plans addressing open GAO or OIG recommendations Incorporate federal cybersecurity frameworks into evaluations and assessments Prepare and update risk management plans, standard operating procedures, and project schedules Present technology risk assessment findings and recommendations to technical and executive audiences Prepare briefing materials for weekly reports and specific audiences Advise on assessment severity and recommend courses of action to government stakeholders Adapt guidance and technical assistance to resource constraints, knowledge variability, and government leadership direction Requirements Active and current Secret federal security clearance Bachelor’s Degree from an accredited university Minimum of five years of relevant cybersecurity experience US Citizenship contractually required Excellent verbal and written communication skills, specifically in report writing Certified in CISSP,

CRISC

, CAP/CGRC, CISA, or another relevant field Experience interpreting and applying federal cybersecurity requirements and frameworks Ability to conduct and scope technology risk assessments Ability to prepare risk acceptance memoranda, risk management plans, SOPs, schedules, briefings, and corrective action plans Nice to have: consulting experience with large federal agencies such as the Department of State, Department of Justice, or Department of Homeland Security on cybersecurity audits and/or IT controls Nice to have: external client‑facing management and/or consulting experience for large firms Core Competencies Demonstrates expertise in cybersecurity risk management, including the ability to conduct technology risk assessments, prepare risk management plans, and adapt federal cybersecurity frameworks. Strong communication skills are essential for presenting findings and recommendations to both technical and executive audiences. Highest-signal resume keywords Cybersecurity Risk Management Technology Risk Assessments Risk Governance Development CISSP Certification Federal Cybersecurity Frameworks ATS Optimization Keywords Hard Skills Risk Management Plans Risk Acceptance Memoranda Standard Operating Procedures Corrective Action Plans Technology Review Board Assessments FOCI-Style Assessments Decision-Support Deliverables Cyber Risk Register Improvement Report Writing Project Schedules Soft Skills Excellent Verbal Communication Excellent Written Communication Advisory Skills Certifications & Qualifications CISSP CRISC CAP CGRC CISA Industry Keywords Federal Security Clearance Cybersecurity Audits IT Controls Department of State Department of Justice Department of Homeland Security #J-18808-Ljbffr Jobtailor