Enterprise Cybersecurity IT and Cyber Risk Expert

Enterprise Cybersecurity IT and Cyber Risk Expert The Opportunity

Serve as a lead operator within Enterprise Cybersecurity’s Information Technology (IT) and Cyber Risk portfolio, managing and advancing critical risk management work streams while acting as a central translator between technical teams and business stakeholders.

This role is responsible for driving execution and continuous improvement across core IT and cyber risk functions, including enterprise risk register transformation, user exceptions oversight, and product risk. The ideal candidate combines strong IT and cyber risk expertise with the ability to operationalize strategy, communicate effectively across audiences, and optimize day‑to‑day program execution. This is a high‑impact, high‑visibility role with increasing leadership responsibility, including mentoring junior staff and ownership of key program outcomes.

Due to the nature of work performed within this facility, U.S. citizenship is required.

• Independently manage and advance enterprise cyber risk work streams. Manage and enhance components of the IT and cyber risk register, support ongoing transformation efforts, such as tooling migration, and contribute to maturation of the product risk program.
• Oversee and improve user exceptions program outcomes. Provide oversight of day‑to‑day execution, guide junior staff, and drive more consistent, outcomes‑based risk decision making.
• Deliver high‑quality risk reporting and insights. Produce clear and actionable risk reports and analysis that support leadership decision‑making and risk reduction.
• Serve as a central risk translator and stakeholder partner. Act as a primary point of contact across business and technical teams, translating complex technical findings into executive‑ready risk narratives and aligning stakeholders on risk prioritization and treatment.
• Drive operational excellence and team enablement. Provide day‑to‑day guidance and mentorship to junior team members while establishing scalable processes, templates, and standards for risk execution.
• Advance program maturity through process improvement. Identify and implement improvements across risk work streams, including automation, tooling optimization such as Smartsheet, and contributions to strategic initiatives that enhance scalability and effectiveness.

• Experience in enterprise IT and cyber risk management, including risk identification, assessment, reporting, and lifecycle management.
• Experience working across technical and non‑technical teams with a customer‑service mindset and strong communication skills.
• Experience with GRC platforms including Smartsheet, Service Now, or risk and compliance tools, with the ability to quickly adapt to new tooling environments.
• Knowledge of industry‑standard frameworks, including FAIR, MITRE, NIST SP 800‑53, CSF, CMMC, and ISO 27001.
• Ability to write clear, concise, and executive‑ready risk reports and translate technical concepts into business context.
• Ability to independently manage and execute complex work streams with minimal oversight.
• HS diploma or GED.

• Experience supporting enterprise risk register development or transformation efforts.
• Experience in Defense Industrial Base (DIB) or federal compliance environments.
• Experience mentoring or leading junior team members in a project or program setting.
• Experience driving process improvement, automation, or AI‑enabled enhancements within risk or GRC programs.
• Experience with GRC‑specific tools or platforms, including Archer.
• Knowledge of product risk, supplier or third‑party risk, or security findings management.

Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.

Individuals that do not meet the threshold are only eligible for select…