Head of Risk Management & Audit

Job Title: Risk Manager

Employment Type: Full-Time

Management Solutions, LLC (MSLLC) is an award-winning management consulting firm delivering solutions for our partners’ most complex challenges. Since 2002, we have supported federal and commercial clients through expertise in project and program strategy, delivery and implementation, engineering and technical advisory services, workforce solutions, and digital solutions.

We are distinguished by our reputation for managing mission-critical projects and helping organizations improve performance through innovative, people-centered solutions. MSLLC has been recognized as Small Business of the Year by the U.Small Business Administration, the Department of Energy, and Oak Ridge National Laboratory and has been named one of the Top Employers in the Greater Knoxville area.

At Management Solutions, we believe our people are the foundation of our success. We are committed to fostering a collaborative and caring culture where employees feel valued, supported, and empowered to grow. We seek professionals who think critically, solve complex problems, and are dedicated to building and sustaining a high-performing, people-centered organization.

Management Solutions is seeking a Risk Manager to support delivery of mission-critical services within a federal IT and cybersecurity environment. This role is client-facing and supports program leadership in identifying, assessing, monitoring, and mitigating risks associated with large, complex federal initiatives involving cyber operations, IT modernization, and mission systems.

The Risk Manager provides subject matter expertise in enterprise risk management, program risk governance, and strategic planning to help the organization meet mission-critical objectives. This role includes establishing and maintaining risk management processes, facilitating risk-informed decision-making, and supporting program execution in a highly regulated federal environment. The position requires strong analytical skills, technical knowledge, leadership capability, and the ability to engage effectively with senior government stakeholders, including Intelligence Community organizations.

Serve as the Risk Manager supporting delivery of consulting services within a federal IT and cybersecurity environment.

Provide subject matter expertise in enterprise risk management, operational risk, cyber risk, and program risk management.

Develop, maintain, and execute comprehensive risk management strategies aligned with program objectives and contractual requirements.

Facilitate identification, assessment, prioritization, and mitigation of risks impacting mission-critical operations.

Support government leadership in implementing risk-informed decision-making processes.

Ensure risk management activities align with client strategic goals and federal mission requirements.

Maintain consistent billable utilization aligned with organizational and contract expectations.

Risk Governance & Program Execution

Establish and maintain risk management frameworks, methodologies, and governance processes.

Lead risk identification and assessment activities across technical, operational, cybersecurity, financial, and organizational domains.

Develop and maintain risk registers, risk dashboards, and mitigation plans.

Facilitate recurring risk review boards, governance meetings, and stakeholder working groups.

Coordinate with project and program leadership to ensure risks are appropriately managed throughout the program lifecycle.

Support integration of risk management activities into project planning, scheduling, and execution processes.

Ensure risk documentation is maintained and aligned with federal requirements and organizational standards.

Track and report risk status, mitigation effectiveness, and risk trends across the program.

Develop executive-level risk briefings, dashboards, metrics, and reporting artifacts.

Provide periodic risk assessments and strategic recommendations to senior government leadership.

Conduct qualitative and quantitative risk analyses to support program decision-making.

Maintain risk governance processes and associated documentation.

Support audits, inspections, assessments, and compliance reviews related to risk management activities.

Ensure traceability of risks, mitigation actions, decisions, and residual risk acceptance.

Support initiatives related to cyber operations, IT infrastructure, cloud services, and mission systems.

Coordinate with cybersecurity, engineering, and operational stakeholders to identify and mitigate technology-related risks.

Ensure risks associated with cybersecurity, information assurance, and compliance requirements are appropriately assessed and managed.

Support risk management activities related to federal cybersecurity frameworks and federal requirements.

Evaluate impacts of emerging cyber threats and vulnerabilities on mission operations.

Translate complex cyber and technical risks into actionable insights for non-technical stakeholders and executive leadership.

Support risk assessments involving classified environments and sensitive mission systems.

Interface with senior government leadership, stakeholders, and clients to support risk-informed decision-making.

Facilitate risk working groups, executive briefings, and governance meetings.

Present risk assessments, mitigation strategies, and recommendations to leadership audiences.

Coordinate across multiple organizations to ensure risk visibility and accountability.

Support high-visibility communications and executive engagements involving program risk posture.

Foster collaboration between technical, operational, and leadership stakeholders to address complex risk challenges.

Lead and coordinate cross-functional teams supporting risk management activities.

Provide mentorship and guidance to junior staff supporting risk, cybersecurity, and program management functions.

Support staffing coordination and resource planning related to risk management efforts.

Ensure timely execution of risk mitigation actions and assigned workstreams.

Promote adoption of risk management best practices across the program.

Support continuous improvement initiatives related to governance, risk management, and organizational effectiveness.

Minimum of 10 years of relevant professional experience in risk management, program management, cybersecurity, enterprise governance, or related disciplines within federal environments.

Bachelor's degree from an accredited university in a relevant field.

A postgraduate degree in a related field may substitute for up to 6 years of required experience.

Demonstrated expertise in enterprise risk management, governance, risk assessment methodologies, and federal program execution.

Experience developing and managing risk management frameworks, risk registers, mitigation strategies, and executive reporting.

Strong understanding of cybersecurity, IT operations, cloud technologies, and federal mission environments.

Demonstrated ability to brief senior government leadership and facilitate executive-level decision-making.

Ability to operate independently within a complex program structure.

Certified Risk Management Professional (PMI-RMP), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), Project Management Professional (PMP), or equivalent certification.

Experience or familiarity with Intelligence Community directives, governance structures, and mission environments.

Experience supporting federal cybersecurity programs, security operations, or enterprise IT modernization initiatives.

Knowledge of federal governance and risk frameworks, including NIST Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), FISMA, FedRAMP, and related standards.

Experience conducting cyber risk assessments and supporting Authority to Operate (ATO) processes.

Possession of an active Top Secret/SCI clearance is strongly preferred.

Citizenship required due to federal contract requirements.

This position is primarily performed in an office environment or a home office setting. Employees will be required to use a computer and other office equipment for extended periods.

Medical, Rx, Dental, and Vision Insurance

Company-paid short-term disability and life insurance

401(k) plan with up to a 5% match with immediate vesting

Flexible Spending Accounts

Paid holidays

Management Solutions is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. We encourage applications from individuals of all backgrounds and experiences.