Risk Governance and POA&M SME

Description

Contingent on Contract Award

National Capital Region (Hybrid On-site/Telework if approved)

Connected Logistics is seeking a Risk Governance and POA&M SME to assist in providing the Department of State Directorate of Technology (DT), Enterprise Architecture (EA), Cyber Security Team (CST) comprehensive cybersecurity support services to protect critical consular systems and data. The CST Cyber portfolio ensures compliance with federal mandates including the Federal Information Security Modernization Act (FISMA) and the Risk Management Framework (RMF), encompassing security monitoring, incident response, threat detection, vulnerability management, and continuous authorization activities.

The Risk Governance and POA&M SME will support assigned IASS personnel and RMF Leads in translating control deficiencies, vulnerability findings, and operational issues into defensible risk records and achievable remediation plans. Government officials retain risk-acceptance and authorization authority.

Key Responsibilities:

Responsible for consistent risk characterization, POA&M development, remediation tracking, closure-evidence review, and portfolio risk analysis across RMF delivery teams.

• •Review findings for control mapping, risk rationale, system applicability, residual exposure, and remediation priority.
• •Support POA&M development with accountable owners, realistic milestones, dependencies, and required closure evidence.
• •Track overdue, stalled, recurring, and cross-system findings and recommend escalation to the ISSO Lead.
• •Review closure packages for technical sufficiency and traceability before the applicable validation or approval process.
• •Develop risk-response recommendations and supporting risk-acceptance materials for Government consideration.
• •Analyze portfolio trends and support authorization briefings, audits, and reporting without altering independent assessor conclusions.

Requirements

• •U.S. citizenship and a final Secret clearance or higher
• •Relevant degree in cybersecurity, computer science, information systems, or a related discipline, subject to the LCAT and permitted substitutions.
• •Senior-level Federal cybersecurity risk and POA&M management experience spanning authorization and continuous monitoring.
• •Strong understanding of NIST controls, vulnerability prioritization, remediation planning, residual risk, and evidence-backed closure.
• •Ability to produce clear technical risk analysis and executive summaries.
• •Meet applicable LCAT certification requirements and maintain required credentials.

Preferred Qualifications

• •CGRC, CRISC, CISSP, or CISM.
• •DOS ArchAngel and authorization risk-briefing experience.
• •Experience analyzing KEV/BOD actions, inherited-control risks, and cross-system remediation dependencies.

Success in this position will be demonstrated by consistent risk records, achievable POA&M milestones, defensible closure packages, and timely visibility into material portfolio risks.

Total Rewards Statement

We believe in fairness and clarity throughout our hiring process. The anticipated salary range for this position is $110,000.00-$120,000.00 USD. This is a good-faith range based on factors such as your experience, geographic location, and any applicable contractual requirements, and may vary slightly.

Beyond salary, we provide a robust benefits package and encourage ongoing professional development, because your growth and well-being matter to us. We’re excited to support you in building a rewarding career with us!

Connected Logistics respects the need for confidentiality for all applicants.

Connected Logistics has been named a 2026 WTOP Top Workplace in the medium sized business category. Our mission is clear: we deliver mission-focused IT, cybersecurity, logistics, and enterprise modernization support to federal agencies. When we invest in our people and create an environment where they feel valued and empowered, we deliver stronger outcomes for our clients and the missions we support.

Connected Logistics offers an excellent benefits package that includes health, dental, vision, life, and disability insurance, a great 401(k) package, and generous Paid Time Off.

EOE/Disability/Veterans