Risk Governance

Risk Governance Cybersecurity Jobs

3 jobs found

Today

Supervisory IT Specialist (INFOSEC)

US Deputy Assistant Secretary for Information and Technology Washington, DC

Washington, DC

Today

$148k - $192k/yr Full time Enterprise Risk Information Security Risk Governance

Apply Now

Job Description

Oversee risk management and cybersecurity programs within the VA Office of Information and Technology, onsite in Washington, DC, with a salary range of USD 147,945 to 192,331 per year.

Responsibilities

Identify and address cyber workforce planning and management needs.
Perform security reviews, detect gaps in the security architecture, and draft a security risk management plan.
Ensure plans of action and milestones or remediation efforts exist for vulnerabilities found during risk assessments, audits, inspections, and related activities.
Approve short-term, long-term, and multiyear assessment plans and schedules.
Provide expert guidance and develop strategic compliance plans, policies, and guidance for a designated team.
Conduct need analyses to uncover opportunities for improved business processes and solutions.
Oversee monitoring of compliance with federal, state, and local laws and regulations at VA facilities and VA-wide programs, including contractor-managed environments.
Offer enterprise cyber security and supply chain risk guidance for the development of Continuity of Operations Plans.
Execute independent, comprehensive assessments of management, operational, and technical security controls and enhancements to determine overall effectiveness.
Lead, coordinate, communicate, integrate, and be accountable for the program's overall success, ensuring alignment with agency priorities.
Manage teams across multiple supervision levels in developing and monitoring compliance programs, procedures, and quality initiatives.
Direct a comprehensive program of assessments to measure VA information systems compliance with statutes, federal oversight, and VA policies and practices.

Requirements

U.S. Citizenship is required to apply.
Complete all required steps in the process, including the online assessment that measures key general competencies.
No inherent physical requirements; accommodations available; no pre‑placement physical exam required.
Probationary period may be required.
Subject to background and security investigation.
Online onboarding may be required; provide acceptable I-9 documents. After May 7, 2025, Real ID noncompliant IDs cannot be used for employment.
A one-year probationary period applies; continuation depends on performance and alignment with public interest goals.
Probationary period outcomes may lead to termination without written certification of continued public interest.
IT related experience must demonstrate five competencies: Attention to Detail; Customer Service; Oral Communication; Problem Solving; and Specialized Experience at least GS-15 level.
Specialized Experience includes leading enterprise cybersecurity risk management, directing risk activities, designing evaluation/reporting methods, and defining program metrics.
Expertise in applying Enterprise Risk Management and Security Architecture to guide decisions and risk mitigation across a large portfolio.
Experience leading end-to-end Security Assessment and Authorization activities for complex VA systems, achieving timely Authorizations to Operate and reducing POA&M.
Skills in program and process management to evaluate, implement, and disseminate security capabilities and validate outcomes with metrics.
Selective Placement Factor: experience leading enterprise cybersecurity risk management per the NIST RMF, evaluating controls, preparing or approving authorization documentation, and making authorization impact recommendations for enterprise IT systems.
Full-time work is considered 35-40 hours per week; part-time experience is credited proportionally.
Veterans and transitioning service members: see VA for Vets resources for career tools and coaching.
For qualification standards, refer to the U.S. Office of Personnel Management guidelines.

Open To

The public: U.S. Citizens, Nationals, or individuals who owe allegiance to the United States.
Career transition priority for CTAP/ICTAP eligible federal employees in the local commuting area.

Direct Hire Authority

This position is being filled using Direct-Hire Authority (5 CFR 337.205) for this occupation.

Education

There is no educational substitution at this grade level.

Required Documents

Resume
DD-214 or Statement of Service
Disability Letter (VA)
OF-306
Other (1)
Other (2)
Performance Appraisal
Separation Notice (RIF)
SF-50 or Notification of Personnel Action

Benefits

A comprehensive benefits package available to federal employees and their families, designed to support a rewarding career.
Detailed benefits information is provided by the hiring agency; eligibility depends on position type and work schedule.

View full job page →

Today

Lead Cybersecurity Architect

JPMorganChase Tampa, FL

Tampa, FL

Today

$133k - $185k/yr Full time Data Security Enterprise Risk Information Security

Apply Now

Job Description

Lead Cybersecurity Architect role at JPMorganChase in Tampa, FL, onsite, with a salary range of USD 133,000 to 185,000 per year.

Responsibilities

Collaborate with technical teams and business stakeholders to discuss and propose approaches that meet current and future cybersecurity needs.
Guide the evaluation of existing cybersecurity principles, processes, and controls and lead assessments of new technology using established standards and frameworks.
Provide ongoing technical guidance and direction to support the business, its technical teams, contractors, and vendors.
Develop cybersecurity risk analysis capabilities using modern development practices to improve visualization and communication of risk to stakeholders.
Partner with Technology and Business teams to model threats effectively and mitigate risk across the coverage area.
Actively contribute to the engineering community as an advocate for firmwide frameworks, tools, and practices of the Software Development Life Cycle.
Govern the coverage area using qualitative and quantitative risk measurements.
Influence peers and project decision-makers to consider and apply leading-edge technologies.
Foster a team culture that emphasizes diversity, opportunity, inclusion, and respect.

Requirements

5+ years of cybersecurity experience in complex environments.
Hands-on experience developing risk visualization capabilities.
Practical, hands-on experience delivering enterprise level cybersecurity solutions and controls.
Strong advisory skills with a proven track record of guiding secure solutions throughout their lifecycle.
Knowledge of cybersecurity architecture, applications, and technical processes with deep expertise in one or more technical disciplines (for example public cloud, artificial intelligence, machine learning, mobile).
Ability to independently tackle design and functionality problems with little to no oversight.
Practical cloud-native experience.
Ability to evaluate current and emerging technologies to select or recommend optimal solutions for future state architecture.
Understanding of the external threat landscape, threat actors, adversary tactics and techniques, and industry trends.

Benefits

Health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

View full job page →

Today

Director cybersecurity, portfolio management

Starbucks Seattle, WA

Seattle, WA

Today

$206k - $343k/yr Full time Enterprise Risk Information Security Management

Apply Now

Job Description

Starbucks offers a senior leadership role in Global Cybersecurity Services, based onsite in Seattle, Washington. The Director of Cybersecurity Portfolio Management leads strategic and operational portfolio management, functioning as an extension of the CISO to align initiatives with enterprise strategy, risk priorities, and regulatory expectations.

Benefits

Medical, dental, and vision insurance
Basic and supplemental life insurance
Short-term and long-term disability
Paid parental leave
Family expansion reimbursement
Paid vacation
Sick time
Eight paid holidays
Two personal days per year
401(k) retirement plan with employer match
Discounted company stock program (S.I.P.)
Starbucks equity program (Bean Stock)
Incentivized emergency savings
Financial well-being tools
100% upfront tuition coverage for a first-time bachelor's degree via Starbucks College Achievement Plan (ASU online)
Student loan management resources
Backup care
DACA reimbursement

Responsibilities

Build and sustain influential relationships at all levels to advance cybersecurity strategy and enterprise risk outcomes.
Serve as a trusted advisor and integrator for the CISO across strategy, execution, and communications.
Partner with senior leadership to identify priority opportunities, align them to enterprise objectives, and drive execution.
Define and communicate cybersecurity strategy, operating model, and execution priorities to internal and external stakeholders.
Collaborate with cross-functional leaders to ensure alignment with Starbucks' business strategy, technology priorities, and risk posture.
Drive execution discipline across the cybersecurity portfolio, ensuring alignment to approved strategies, roadmaps, and commitments.
Establish governance mechanisms, operating rhythms, escalation paths, and decision forums across Global Cybersecurity Services.
Maintain visibility into delivery progress, dependencies, risks, and trade-offs, escalating issues as needed.
Support multi-year planning, prioritization, and sequencing of cybersecurity initiatives across domains and regions.
Ensure consistent measurement and reporting of outcomes, risks, and performance metrics.
Translate cybersecurity strategy and risk priorities into coordinated execution across Identity, Data Protection, Threat Detection & Response, Governance Risk & Compliance, Product Security, and regional teams.
Facilitate governance and compliance to optimize cybersecurity investments and align with enterprise standards.
Identify gaps, overlaps, and execution risks across initiatives and drive resolution.
Lead the synthesis of materials for executive leadership, Audit & Compliance Committee, and Board-level discussions.
Support engagement with Legal, Privacy, Finance, and external auditors as required.
Challenge and inspire partners across Global Cybersecurity Services to achieve enterprise outcomes.
Provide coaching, feedback, and leadership support to the team, senior leaders, and key contributors.
Ensure the team grows in skills, impact, performance management, and career development.
Support leadership capability development, succession planning, and organizational effectiveness.
Promote a culture of accountability, collaboration, and continuous improvement.

Requirements

Thorough familiarity with project management tools, techniques, methodologies, and best practices.
Ability to learn and apply multidisciplinary business principles to drive successful outcomes in cross-functional projects.
Strong capability to tell stories and simplify complex work using analysis and data-backed evidence.
Proven history of developing, leading, and mentoring teams through service delivery and change.
Ability to establish cross-functional, collaborative relationships with business and technology partners.
Strong critical thinking skills with a track record of delivering results.
Exceptional communication and presentation skills, both oral and written.
Bachelor’s degree in Information Security, Computer Science, or a related field and/or 10+ years of cybersecurity experience, with focus areas such as security operations, incident response, or risk management.
Experience in cybersecurity, technology, risk, or enterprise operations.
Experience operating at an executive interface and influencing outcomes without direct authority.
Strong familiarity with cybersecurity frameworks and enterprise risk management practices (eg, NIST CSF, ISO 27001).
Demonstrated executive communication skills, including preparation of Board-level materials.

View full job page →

Risk Governance Cybersecurity Jobs

Supervisory IT Specialist (INFOSEC)

Lead Cybersecurity Architect

Director cybersecurity, portfolio management

Get Job Alerts