Q

Quantum Sky

Secure, AI-enabled, quantum-ready defense tech

Governance, Risk and Compliance Lead - Risk

Security Governance, Risk & CompliancePosted on Nov 9
Full-timeWashington, DC, USAIn-person

About the Job

Requirements

  • A bachelor's degree or an equivalent combination of formal education and experience; a bachelor's degree may be substituted by four additional years of relevant experience.
  • At least eight years of general experience and six years of relevant experience in the functional responsibility.
  • Knowledge of cybersecurity threats and information system technologies, and experience with online research techniques.
  • Knowledge of risk management and experience working with the Systems Development Life Cycle (SDLC) and performing security tasks throughout it.
  • Experience with and working understanding of Federal Information Security Modernization Act (FISMA) compliance, all phases of Certification and Accreditation, and documentation in accordance with National Institute of Standards and Technology (NIST) guidance.
  • Knowledge of NIST publications, including the NIST 800 series; Office of Management and Budget (OMB) circulars and memoranda, including OMB A-123 and A-130; and Committee on National Security Systems (CNSS) publications, including CNSS 1253, and their security requirements and impact.
  • CISSP certification is required.
  • An active Top Secret clearance is required.
  • Strong analytical and organizational skills.
  • Concise writing skills.

Responsibilities

  • Advise the Chief Information Security Officer (CISO) and Deputy CISO on information assurance, compliance frameworks, and cybersecurity strategy.
  • Represent the Department in working groups and cybersecurity committees addressing challenges such as maturing the CDM program, automating the Authorization to Operate (ATO) process, and developing and implementing enterprise security services.
  • Lead development of the Department’s program for identifying, protecting, and monitoring High-Value Assets (HVAs).
  • Oversee daily information system compliance operations, manage risk escalation paths, and mentor assessment teams by providing advanced assistance.
  • Lead complex risk assessments and security audits in sensitive operational environments, and establish remediation frameworks to address vulnerabilities systematically.
  • Lead security authorizations (Assessment and Authorization, A&A), analyses, and compliance evaluations in highly classified and sensitive environments.
  • Develop requirements and specifications for reviewing and approving procurement requests, major systems development activities, telecommunications hardware and software, and hardware and software encryption techniques based on security concerns.
  • Assess technology to identify and remediate security vulnerabilities.
  • Conduct capacity planning and system optimization reviews to align resource utilization and network performance with a hardened, compliant security posture.
  • Provide Automated Indicator Sharing (AIS) and client network guidance, training, research, and recommendations.
  • Support technical reviews for non-standard operational requirements and systems, including designing, developing, and maintaining unique security assessment tools and conducting assessments.

Desired Qualifications

  • Understanding of and experience with CSAM.

About the Company

Quantum Sky

Secure, AI-enabled, quantum-ready defense tech

Quantum Sky provides secure, AI-enabled, and quantum-ready technology for U.S. defense, intelligence, and federal civilian agencies. Its Project 137 translates emerging tech into fielded capabilities across Infrastructure & Platform Operations, Cyber, Decision Advantage, and Quantum, including AI-enabled operations, autonomous cybersecurity, secure cloud, and quantum-informed sensing and algorithms. The company differentiates itself with a government-focused portfolio and a disciplined path from research to mission-ready systems, backed by major federal contracts. Its goal is to help federal agencies modernize critical systems, protect mission data, and win faster against cyber and AI-driven threats through end-to-end mission technology.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Reston, VA
Founded
2018

Recently Posted Jobs

Explore more opportunities at Quantum Sky

See more jobs