Risk Governance and POA&M SME

Connected Logistics

. Provide cybersecurity support to the Department of State Directorate of Technology, Enterprise Architecture, and Cyber Security Team .

Posted 10/2/2026full-timeSpringfield • Virginia • United StatesMid-LevelSenior💰 $110,000 - $120,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity risk management, including FISMA compliance, RMF processes, and POA&M development. Proficient in analyzing vulnerabilities, producing technical risk analyses, and supporting authorization briefings while maintaining required cybersecurity credentials.

Highest-signal resume keywords

FISMA ComplianceRisk Management Framework (RMF)POA&M DevelopmentNIST ControlsCybersecurity Risk Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk ManagementVulnerability PrioritizationRemediation PlanningTechnical Risk AnalysisControl MappingClosure Evidence ReviewPortfolio Risk AnalysisRisk-Response RecommendationsAuthorization Briefings

Soft Skills

Clear CommunicationAnalytical Thinking

Tools & Technologies

DOS ArchAngel

Certifications & Qualifications

CGRCCRISCCISSPCISM

Industry Keywords

Federal CybersecurityContinuous MonitoringRisk RecordsOperational IssuesExecutive Summaries

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Provide cybersecurity support to the Department of State Directorate of Technology, Enterprise Architecture, and Cyber Security Team
Ensure compliance with FISMA and the Risk Management Framework (RMF)
Support IASS personnel and RMF Leads in translating control deficiencies, vulnerability findings, and operational issues into risk records and remediation plans
Maintain consistent risk characterization, POA&M development, remediation tracking, closure-evidence review, and portfolio risk analysis across RMF delivery teams
Review findings for control mapping, risk rationale, system applicability, residual exposure, and remediation priority
Develop POA&Ms with accountable owners, milestones, dependencies, and closure evidence
Track overdue, stalled, recurring, and cross-system findings and recommend escalation to the ISSO Lead
Review closure packages for technical sufficiency and traceability
Develop risk-response recommendations and risk-acceptance materials for Government consideration
Analyze portfolio trends and support authorization briefings, audits, and reporting without altering independent assessor conclusions

Requirements

What you’ll need

U.S. citizenship
Final Secret clearance or higher
Relevant degree in cybersecurity, computer science, information systems, or a related discipline, subject to the LCAT and permitted substitutions
Senior-level Federal cybersecurity risk and POA&M management experience spanning authorization and continuous monitoring
Strong understanding of NIST controls, vulnerability prioritization, remediation planning, residual risk, and evidence-backed closure
Ability to produce clear technical risk analysis and executive summaries
Meet applicable LCAT certification requirements and maintain required credentials
CGRC, CRISC, CISSP, or CISM preferred
DOS ArchAngel and authorization risk-briefing experience preferred
Experience analyzing KEV/BOD actions, inherited-control risks, and cross-system remediation dependencies preferred

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
401(k) package
Generous Paid Time Off
Ongoing professional development