Cyber Risk Management PM

Position Description:

The Enterprise Risk Management (ERM) Team PM is responsible for developing, instituting, and managing a FAIR-based and NIST-based ERM process to ensure that enterprise risks are appropriately recorded, managed, and leveraged to produce business logic that informs budget requests and cybersecurity strategy.

The ideal candidate has proven experience in managing ERM processes, tools, roles, reports, and forums, and how these align with FinOps and Governance, Risk & Compliance (GRC). 

The ideal candidate is fluent in NIST and FAIR risk methodologies and taxonomies and will be responsible for providing informed process architecture recommendations to stand up and maintain an ERM program and process. The program will include an ERM tool, stakeholder roles and responsibilities, a hierarchy of forums, to include the Executive Risk Function.

The individual will be responsible for working directly with the executive client to shape and realize this program and process while managing a small team in the day-to-day activities.

Key Responsibilities:

• Program Execution & Federal Alignment:
• Work directly with the executive clients to architect and develop an ERM program and process, informed by NIST and, FAIR methodologies, separate from but working in relation to FinOps and GRC processes.
• Develop a program roadmap for maturing and advancing the ERM program to include direct alignment with organizational budgetary decision-making.
• Roll out the ERM program and process to enterprise stakeholders to include process guidance and a clear RACI.
• Facilitate or support a hierarchy of ERM forums to include the Enterprise Risk Executive Function.
• Ensure stakeholder compliance with the established ERM program.
• Identify and implement continuous improvement.
• Supervisory & Team Management:
• Lead, mentor, and manage the ERM Specialist, fostering a collaborative and effective working environment.
• Assign and prioritize team tasks, set performance objectives, and provide regular feedback and coaching to ensure high-quality deliverables.
• Manage the day-to-day activities of the risk management team, ensuring compliance with established processes and timely completion of all duties.
• Operational & Tool Oversight:
• Manage the team's execution of the analysis, selection, and implementation of a suitable ERM registry tool, reporting progress and findings to federal counterparts.
• Institute the ERM registry tool and processes across the stakeholder landscape, working collaboratively with federal partners to drive adoption.
• Ensure the ERM program provides continuous support to all stakeholders, guaranteeing the accurate recording, maintenance, and disposition of enterprise risks within the registry.
• Facilitation & Reporting:
• Lead the team in facilitating or supporting a hierarchy of enterprise risk management forums.
• Prepare and deliver enterprise risk briefings to stakeholders and NNSA leadership, often in direct coordination with the Federal Executive.
• Develop and deliver clear, accurate, and transparent enterprise risk reporting and outputs to inform organizational funding decisions and strategy development; identify opportunities for and implement automation                          

Qualifications:

• Must be a US Citizen.
• Bachelor’s degree in Business Process Management, Enterprise Risk Management, or a related field
• 5+ years of professional experience in enterprise risk management as a business process.
• Strong experience managing project and program risks (end to end risk management)
• Client facing strong, working high level stakeholders
• Demonstrated experience in developing and implementing enterprise risk management processes, policies, tools, procedures, and outputs that inform business funding decisions.

Bonus:

Experience with risk registry tools, including requirements gathering and implementation.