Apply on Employer Site

Guidehouse · 1 month ago

Cybersecurity Risk Manager

US - VA, McLean

Full-time

Onsite

Senior Level

7+ years exp

Guidehouse is a consulting firm that helps clients solve complex business issues, and they are seeking a Cybersecurity Risk Manager to support enterprise-wide cyber risk management efforts. This role involves conducting risk assessments, implementing mitigation strategies, and ensuring compliance with DoD cybersecurity objectives while working closely with senior leadership.

AdviceConsultingManagement Consulting

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Coordinate vulnerability management activities across assigned systems, including scanning, analysis, prioritization, and remediation in compliance with DoD policy and industry standards (e.g., DISA, ACAS)

Support development and execution of cyber risk strategies, including tracking key performance indicators and identifying opportunities for process and technology improvements

Support incident response efforts, including monitoring, triage, investigation, containment, and recovery, and escalate complex incidents to senior leadership

Conduct forensic analysis and anomaly detection, prepare incident reports, and maintain evidence integrity to support investigations and compliance requirements

Assist with NIST Risk Management Framework (RMF) compliance activities, including drafting security documentation, assessing security controls, and maintaining accreditation artifacts for DoD systems

Execute cybersecurity directives (e.g., OPORDs, CTOs, EXORDs) by coordinating with stakeholders, tracking compliance, and reporting status to leadership

Support Zero Trust Architecture initiatives, including conducting assessments and implementing technical controls aligning with NIST and DoD frameworks

Administer device compliance and data protection policies, including authentication and automated remediation to safeguard sensitive information

Qualification

NIST RMFZero Trust ArchitectureCybersecurity certificationsIncident responseVulnerability managementAnalytical skillsTechnical communicationTeam leadership

Required

At least seven (7) years of experience in IT or cybersecurity, with three (3) years supporting US Federal government clients

Hands-on experience with the NIST RMF process and Zero Trust Architecture implementation, including vulnerability management, incident response, and cybersecurity tool administration in an enterprise environment

Strong technical communication skills, with the ability to explain complex issues to both technical and non-technical audiences

Demonstrated ability to lead small teams and coordinate tasks across multiple stakeholders

Strong analytical and problem-solving skills

An ACTIVE and CURRENT Secret security clearance