Lead, Cybersecurity Risk and Compliance

Requisition

• Relocation Authorized:
  None
• Telework Type:
  
  Part-Time Telework
• Work Location:
  
  Reston, VA
• Salary Range: $123,400 - $203,700 annually (salary range is based on market data; final salary offered is determined by education, experience, and qualifications of the applicant.)

Since 1898, we have helped customers complete more than 25,000 projects in 160 countries on all seven continents that have created jobs, grown economies, improved the resiliency of the world's infrastructure, increased access to energy, resources, and vital services, and made the world a safer, cleaner place.

Differentiated by the quality of our people and our relentless drive to deliver the most successful outcomes, we align our capabilities to our customers' objectives to create a lasting positive impact. We serve the Infrastructure;
Nuclear, Security & Environmental;
Energy;
Mining & Metals, and the Manufacturing and Technology markets. Our services span from initial planning and investment, through start-up and operations.

Core to Bechtel is our Vision, Values and Commitments. They are what we believe, what customers can expect, and how we deliver. Learn more about our extraordinary teams building inspiring projects in our Impact Report.

Please use this field to provide any standard language being used externally to describe the project (typically the first few sentences used to describe the project on the  website or in press releases) . If no overview is available, please remove this section and Talent Acquisition will add a general description for the GBU.

In this role, you will participate in the development and execution of risk assessments, compliance monitoring, and an enterprise-wide cyber security and awareness program. You will identify gaps in policy and controls, lead policy development, and participate in global remediation efforts. Your work will ensure effectively deployed programs and well-informed, engaged employees. #LI-TN1

Cybersecurity Risk Program Leadership

• Lead enterprise cybersecurity risk management activities, including risk assessments, security exception evaluations, risk documentation, mitigation planning, and continuous monitoring of emerging threats, technology changes, regulatory developments, risk trends to drive risk-informed decisions, control improvements, and program priorities.
• Build trusted relationships across Cybersecurity, IT, Legal, Compliance, Architecture, Operations, Software Development, projects, service owners, and business units to embed risk-informed decision-making and create shared accountability for risk treatment.
• Serve as a cybersecurity risk thought leader and trusted advisor; lead cross-functional working sessions, align stakeholders on priorities and requirements, resolve issues, and drive decisions and deliverables with limited direction.
• Establish and continually improve program processes, roles, decision points, and quality expectations that enable consistent identification, assessment, treatment, acceptance, monitoring, and closure of cybersecurity risk.
• Provide work leadership, coaching, and mentoring; review work products and promote consistent, high-quality risk practices.

Metrics, Reporting, Service Now, and AI Enablement

• Lead the evolution of the cybersecurity risk management program by prioritizing risk treatment activities, delivering meaningful metrics, reporting, and insights that enable business leaders and stakeholders to make informed decisions, improve risk posture, and advance program maturity.
• Partner with Service Now product owners, developers, administrators, and process stakeholders to clarify requirements, prioritize enhancements, validate delivered functionality, improve data quality, and support adoption of standardized risk workflows.
• Define and document business, functional, workflow, data, reporting, and control requirements for the Service Now development team supporting cybersecurity risk and GRC capabilities.
• Identify and apply approved artificial intelligence, automation, and analytics capabilities to streamline risk processes, improve data analysis, enhance reporting, and advance the maturity and effectiveness of the program.
• Prepare polished reports, presentations, and decision materials that provide stakeholders with a clear view of cybersecurity risk, business impact, treatment status, and required actions.

Level 1:
Typically requires bachelor's degree (or international…