Deputy Cybersecurity Governance Lead

- Provide daily operational direction for GRC workstreams, including Risk Management, Assessment & Authorization, and Audit Support. - Supervise the creation, review, and quality assurance of Security Authorization packages, including SSPs, SARs, and POA&Ms for multiple systems. - Organize and prepare systems for Security Control Assessments (SCA), ensuring all documentation is complete, precise, and audit-ready. - Oversee Security Impact Analyses (SIAs) related to system modifications, modernization projects, and new system integrations. - Ensure security controls are effectively implemented and monitored in alignment with NIST SP 800-53, RMF, and agency security protocols. - Lead the lifecycle management of POA&Ms, covering development, progress tracking, remediation validation, and closure reviews. - Manage Risk Acceptance procedures, ensuring proper documentation, justification, and alignment with system risk profiles. - Direct and maintain ongoing monitoring activities to assure control efficacy and continuous authorization compliance. - Coordinate audit support tasks, including PBC responses, audit data requests, audit presentation development, and remediation of audit findings. - Oversee the preparation of audit response packages (RCF, RAC, PSR) and assist with FISMA and A-130 reporting obligations. - Act as a primary contact for federal stakeholders, including ISSOs, Authorizing Officials, and Security Control Assessors. - Facilitate collaboration between system owners, Security Operations, Vulnerability Management, and Security Tools teams for synchronized security efforts. - Provide guidance and oversight to ISSO support and business area representatives to ensure the effective fulfillment of responsibilities. - Set and enforce quality standards for all GRC deliverables to ensure documentation accurately represents actual system implementations. - Manage task tracking, prioritization, and execution across team activities to ensure contract obligations and timelines are met. - Identify procedural gaps and implement enhancements to improve efficiency, reduce RMF cycle times, and boost audit preparedness. - Create and present executive-level reports, risk briefings, and status updates to both internal and external stakeholders.