Cyber Security Government Risk and Compliance Lead

$145,600 - $156,000/Yr

Pyramid Consulting - Atlanta, GA

Full-time - Mid Level

Atlanta, GA

Professional, Scientific, and Technical Services

About the position

The Cyber Security Government Risk and Compliance Lead position is a critical role within the organization, focusing on ensuring compliance with applicable regulatory and legal requirements while implementing leading industry practices in cybersecurity. This position is a contract opportunity with a duration of over six months, located in Atlanta, GA, and requires onsite presence on Thursdays, with flexibility for other days after an initial period. The role involves maturing the Cybersecurity Risk Management Program, managing the cybersecurity risk register, and ensuring that appropriate risk management strategies are in place and effectively followed up on. The successful candidate will be responsible for updating Business Impact Analysis (BIAs) plans to assess key cybersecurity systems, overseeing the organization-wide Security Awareness Program, and conducting cybersecurity risk assessments in accordance with the NIST Cybersecurity Framework (CSF). This includes performing control assessments to ensure compliance with client policies and regulatory requirements, as well as leading initiatives to promote a security mindset throughout the organization. The role also involves active participation in incident response tabletop exercises and collaborating with the Cybersecurity GRC team to build programs that enhance security awareness and training across the organization. Additionally, the Cyber Security Government Risk and Compliance Lead will track incidents related to SEC cybersecurity disclosure compliance, maintain the SEC Materiality Checklist, and update workflows and incident response plans based on new SEC mandates. The position requires a strong understanding of the EU Artificial Intelligence (AI) Act Compliance Activities, including AI inventory and risk assessment, as well as governance and risk compliance activities related to AI. This role is essential for ensuring that the organization meets its cybersecurity obligations while fostering a culture of security awareness and compliance.

Responsibilities

• Update Business Impact Analysis (BIAs) plans to determine Cybersecurity key systems to assess.
• Mature the Cybersecurity Risk Management Program by managing the cybersecurity risk register and issue management.
• Ensure appropriate risk management strategies are in place and followed up on, including data privacy and incident response.
• Help with the security awareness program, including phishing simulations and computer-based training.
• Align AI Risk Management Framework (RMF) to NIST Cybersecurity Framework (CSF).
• Oversee organization-wide Security Awareness Program, including proactive communications on latest threats and workshops.
• Work closely with Cybersecurity GRC team to build programs and initiatives promoting a security mindset.
• Assist with Internal Audits, remediate findings, and collaborate with key business stakeholders.
• Participate in Incident Response Tabletop exercises and update with lessons learned.
• Perform cybersecurity risk assessments and control assessments to ensure compliance with policies and regulations.

Requirements

• Experience with SEC Cybersecurity Disclosure Compliance and incident tracking.
• Knowledge of SEC PowerApp administration and incident management.
• Familiarity with the EU Artificial Intelligence (AI) Act Compliance Activities.
• Experience in AI Governance and Risk Framework.
• Strong understanding of cybersecurity risk management and compliance activities.

Nice-to-haves

• Experience with GRC tool implementation.
• Familiarity with incident response planning and execution.
• Knowledge of industry best practices in cybersecurity risk management.

Benefits

• Health insurance (medical, dental, vision)
• 401(k) plan
• Paid sick leave