GRC / Risk Management Lead
Accenture Federal Services · Washington, DC
About the role
Leads the governance, risk and compliance programme on a large federal cybersecurity contract for Accenture Federal Services, based in Washington, DC, and heads a small team of GRC analysts.
The lead owns the enterprise risk register, from identifying and scoring risks to tracking their mitigation, and runs the whole POA&M lifecycle through to validating that fixes hold. The role administers the GRC platform, configuring workflows, mapping controls and automating evidence collection, assesses the risk that new suppliers, products and system integrations bring, and builds risk dashboards for programme and client leadership. It also supports continuous ATO work and periodic control assessments, writes risk management policies and procedures, works with technical and operations teams so that findings turn into remediation, and reviews and develops the analysts' work.
The team wants five years of federal risk management under the NIST RMF, strong knowledge of FISMA, NIST 800-53 and 800-37, experience administering a GRC platform such as ServiceNow GRC, Xacta or Archer, and confidence presenting risk to leaders. CRISC or CISM is required, and CISSP or CGRC is preferred.