> Markdown version of [/jobs/ext/544273-grc-lead-cyber-risk-manager](https://www.wearedevelopers.com/jobs/ext/544273-grc-lead-cyber-risk-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Lead / Cyber Risk Manager - **Company:** CyberLinx Solutions LLC - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Technology - **Published:** June 13, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=f82368876beacaf0 ## About the Role Do you have experience in Senior leadership?, Do you have a Bachelor's degree?, * Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or related field * 8+ years of experience in cybersecurity, with at least 3-5 years in GRC or risk management leadership roles * Strong knowledge of: + NIST Cybersecurity Framework (CSF) + NIST Risk Management Framework (RMF) + NIST SP 800-53 / 800-171 * Experience supporting audits, compliance programs, and regulatory frameworks * Proven ability to lead cross-functional teams and communicate with executive leadership ## Description CyberLinx Solutions LLC is seeking a forward thinking Cybersecurity GRC Lead / Cyber Risk Manager responsible for leading the organization's cybersecurity governance, risk, and compliance (GRC) program. This role oversees enterprise risk assessments, regulatory compliance, policy development, and security control implementation aligned to industry frameworks such as NIST CSF and NIST RMF. The ideal candidate will serve as a strategic advisor to leadership, ensuring cybersecurity risks are identified, assessed, and managed in alignment with business objectives and regulatory requirements., Governance & Program Leadership * Lead and manage the enterprise GRC program, including policies, standards, and procedures * Serve as the primary advisor on cybersecurity risk and compliance matters * Align cybersecurity strategy with business objectives and regulatory requirements * Provide executive-level reporting on risk posture, compliance status, and remediation efforts Risk Management: * Conduct enterprise and system-level cybersecurity risk assessments * Develop and maintain risk registers aligned to NIST SP 800-53 and NIST SP 800-171 * Define risk tolerance, scoring methodologies, and mitigation strategies * Perform gap assessments and maturity evaluations using NIST CSF Compliance & Audit * Ensure compliance with federal, state, and industry regulations for NIST RMF, and FISMA as applicable. * Lead audit readiness efforts and coordinate internal/external audits * Develop Plans of Action & Milestones (POA&M) and track remediation activities * Maintain documentation supporting Authority to Operate (ATO) processes Security Controls & Frameworks * Oversee implementation and validation of security controls * Map controls across frameworks (NIST CSF, NIST 800-53, ISO 27001) * Collaborate with technical teams to ensure control effectiveness Third-Party Risk Management * Evaluate vendor and third-party cybersecurity risks * Conduct security assessments and due diligence reviews * Ensure contractual security and compliance requirements are met ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)