Cyber Risk Operations Lead

Location: Arlington, VA

Department: 58283426 - AFS IT Security

The Cyber Risk Operations Lead plays a critical role in ensuring the alignment of Risk Management security practices and operations with business objectives for the Information Security organization. This role supports the team's assessors, facilitates the implementation of Cyber Risk end to end processes, develops and maintains SOPs, and provides subject matter expertise to various stakeholders. This role will provide facilitation and collaboration activities with leadership, engineering teams, security assessors, incident response resources, and cross-functional teams to drive security practices, process improvements, and knowledge sharing.

The Work

• Support team assessors in implementing the existing Security Risk Management processes across all workflows
• Communicate clear team goals, delegate tasks effectively, and ensure alignment with organizational priorities
• Support existing Security Risk Management processes and identify inefficiencies in the process and implement process improvements or automation where applicable
• Support the management and maturity of the existing Approved Products List process within the team
• Support management and improvement of the cross-collaboration review and approval of requests requiring adjudication
• Maintain and update SOPs and supporting documentation to support the end to end Cyber Risk process
• Provide SME guidance on processes and procedures to engineering teams, security assessors, and incident response resources
• Publish and maintain KB articles to promote awareness on new products, processes, or overall structure
• Facilitate discussions and solutioning sessions with key stakeholders to support maturing operations between cross-functional teams
• Promote effective communication strategies to bridge teams and support a secure environment
• Audit and review operations at a tactical level to address gaps and develop solutions
• Coach and mentor team members to improve their technical and operational skills, ensuring continuous professional development.
  
  

What you need

• US Citizen
• Bachelor’s Degree in Information Technology, Information Security, Business or Risk Management (or equivalent experience)
• 5+ year of Risk Management, Security Assessment, or a related field.
• Knowledge of Security Risk Management, IT management and risk frameworks.
• Demonstrated experience developing and refining technical and business operational processes.
• Demonstrated experience identifying, prioritizing and escalating issues to team leadership.
• Innovative problem solving, research, and analytical skills
• Demonstrated strong verbal and written communication skils with attention to polish
• Ability to work independently and as part of a high-performing team
• Excellent teamwork and collaboration skills.
• Familiarity with Jira, and Office Suite

Bonus if you have

• Knowledge of the ProcessUnity tool