Governance, Risk, and Compliance Lead

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or related field (Master’s preferred).
• 10+ years of experience in cybersecurity governance, risk, and compliance.
• Deep knowledge of cybersecurity frameworks (NIST, ISO 27001, CIS, COBIT).
• Strong understanding of data privacy regulations and compliance requirements.
• Proven leadership experience with the ability to influence at all levels.
• Professional certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer highly desirable.
• US Citizenship.
• Must have the ability to obtain / maintain a Public Trust clearance.

Preferred Qualifications

The Governance, Risk and Compliance (GRC) Lead for the FAA BNATC contract provides operational leadership and direction for cybersecurity, compliance, and risk activities supporting FAA mission systems and enterprise services. This role is responsible for establishing and maintaining cybersecurity policies, standards, and procedures tailored to FAA environments. The successful candidate will perform risk assessments, POA&M activities, security control implementation, and monitoring in compliance with NIST SP 800-53 and FAA ISSO guidance as well as ensure full lifecycle support for ATO packages and security authorizations.

The GRC Lead serves as the primary GRC manager to the CISO, ensuring secure operations for critical systems supporting the National Airspace System (NAS) and related FAA infrastructure.

Key Responsibilities

Cybersecurity Governance

Risk Management

Compliance & Privacy

Incident Response & Resilience

Leadership & Collaboration

#J-18808-Ljbffr