Risk- Asset Management Lead; RBAM

Position: Risk-Based Asset Management Lead (RBAM)
# Risk-Based Asset Management Lead (RBAM)
Skyward IT Solutions

MDFull-Time Jun 01, 2026

Information Technology##

Job Description
** We are Skyward.
** That is, a love for people, for improvement, for human advancement through information technology. We are a people-centered business with a desire to serve others. We are diverse and unified; creative and collaborative; a collection of complementary, not competing talents. And though on the surface we remain relaxed, beneath, a torrent of energy links us to our civic tech mission.

We stand by our values, and we won’t compromise on any of them.
** Integrity:
** We’re conscientious, intentional, and empathetic. Our words and actions align. That’s our character. Please don’t ask us to play another part, we’re poor actors.

** Compassionate:
** If we may borrow a quote from Theodore Roosevelt: “No one cares how much you know until they know how much you care.” Because our team is thoughtful and supportive, caring deeply for each other, our clients, and our work, this comes naturally.
** Inquisitive:
** We remain students by failing openly and turning lessons into solutions.
** Unconventional:
** For us, life isn’t what happens outside of work. Work happens inside of life and our culture erases the line often dividing the two.

** Authentic:
** Made possible only because we embody the values listed above. We’re relaxed and fun yet intensely curious and driven. Team members are placed with thought, care, and precision to ensure that Trust, Truth, and Transparency continue to represent our brand. Because of that, we continue Onward, Upward, and Skyward.  **(
** CONTINGENT HIRE BASED ON CONTRACT AWARD**)
** We need a Risk-Based Asset Management Lead.
If “CVE,” “STIG,” and “baseline drift” show up in your dreams — in a good way — keep reading. You’ll oversee Vulnerability Management, Configuration Management, and Database Management as one integrated practice (not three disconnected silos) and partner with the Risk Management Program to make sure the highest-impact risks get fixed first. If you’ve scaled a vuln program, hardened databases without melting production, and can brief a CISO without melting yourself, we want to talk.

Come join us if you’re motivated to learn from others, to learn from mistakes, and to be part of a future-looking, growth-oriented team.

Let’s go Skyward together.### What you'll do:
* Lead the integrated RBAM practice across Vulnerability Management, Configuration Management, and Database Management, aligning effort with USCIS business priorities and risk tolerance.
* Oversee RBAM projects end-to-end: track schedules, facilitate working sessions, and brief leadership and the Government PM/COR on status, risks, and decisions.
* Run the vulnerability scanning program using approved tooling. Initiate scans, analyze results, prioritize remediation by impact and likelihood, and ensure adherence to DHS policies and federal regulations.
* Continuously monitor emerging threats (CVE, NVD, CISA KEV) and translate them into a prioritized, defensible remediation backlog.
* Validate and act on the DHS/CISA Cyber Hygiene Report. Partner with system owners and admins on remediation plans, track progress, and report to leadership.
* Support the USCIS software approval process — evaluate new products and technologies for security, compliance, and operational fit.
* Establish, document, and enforce configuration management policies, procedures, and baselines across diverse IT environments — with full traceability for changes (documented, tracked, approved, audited).
* Use configuration management tooling to monitor and report on system configurations and compliance, identify drift, and resolve configuration-related risks.
* Develop and maintain database hardening scripts and processes; translate audit requirements into actionable configurations and evidence artifacts.
* Build and refine Splunk dashboards and reporting (and Service Now workflows/tickets) so VM/CM posture is visible at a glance — not buried in a spreadsheet.
* Author and maintain SOPs and Playbooks for RBAM operations; contribute to the Risk Register, Weekly Status Report, and Monthly Program Management…