Cybersecurity Governance and Risk Management (GRC) Lead
Boost your chances before you apply.
ERP International
Laurel, MD, US
Summary
The lead will provide strategic and operational support for cybersecurity program management, including control assessments, risk analysis, and audit readiness. They will also coordinate with technical teams and executive leadership to implement NIST and FISMA requirements while driving cybersecurity modernization initiatives.
Job Description
Overview
Location
Remote (U.S.) | Occasional Travel May Be Required
We appreciate your interest in becoming part of our team. Although this requisition does not apply to a specific immediate opening , we value proactive candidates like yourself who are looking to build a meaningful career with ERP International. We will keep your application on file and contact you when suitable opportunities arise. (Applying for the future openings posting does not guarantee employment).
ERP International, LLC (www.erpinternational.com) is currently seeking a Full Time Cybersecurity Governance and Risk Management (GRC) Lead to support the Centers for Medicare & Medicaid Services. Qualified candidates are urged to apply to learn more about this great opportunity! The successful candidate will provide strategic and operational support across cybersecurity program management, control assessments, continuous monitoring, audit readiness, risk analysis, policy development, and stakeholder engagement activities in highly regulated environments.
Be the Best! ERP International is honored to be named a 2026 Top Workplace by WTOP News! 7 Years Running.
ERP Offers Employees:
* Competitive Salaries & Benefits to include Health, Dental, Vision and Retirement!* Health Advocate & Concierge Services!* Unlimited Job- Related Training & Development!
* Employee Recognition & Incentive Programs!
* Employee Appreciation & Company Sponsored Events!* Opportunity to work with leading edge technology!
* Community Outreach & Charity Work!
Connect With Us! Apply online today and discover more about this exceptional employment opportunity. www.erpinternational.com
ERP is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment on the basis of race, color, sex, religion, national origin, veteran status, disability status, age, or any other characteristic protected by federal, state, or local law.
ERP International is committed to providing veteran employment opportunities to our service men and women.
Pay Range: $165,000 – $210,000
The salary range for this position is determined based on a variety of factors, including but not limited to, experience, qualifications, skill level, and location. The final salary offer will fall within this range and will be commensurate with the candidate’s background and the specific demands of the role.
About ERP International, LLC: ERP is a nationally respected provider of health, science, and technology solutions supporting clients in the government and commercial sectors. We provide comprehensive enterprise information technology, strategic sourcing, and management solutions to DoD and federal civilian agencies in 40 states. Founded in 2006, ERP is headquartered in Laurel, MD and maintains satellite offices in Montgomery, AL and San Antonio, TX - plus project locations nationwide.
Responsibilities
Job Specific Details and Tasks:
- Support enterprise cybersecurity governance and compliance programs.
- Conduct security control assessments and risk analyses.
- Review and maintain security authorization documentation.
- Support implementation of NIST, FISMA, and agency cybersecurity requirements.
- Assist with continuous monitoring, vulnerability management, and remediation tracking.
- Develop executive reports, dashboards, and risk briefings.
- Participate in audit readiness and compliance activities.
- Coordinate with technical teams, security stakeholders, and executive leadership.
- Evaluate cybersecurity processes and recommend improvements.
- Support cybersecurity modernization and transformation initiatives.
Qualifications
Minimum Qualifications:
- 7+ years of cybersecurity, governance, compliance, auditing, risk management, or related experience.
- 3+ years leading governance, compliance, risk management, or cybersecurity oversight activities.
- Experience supporting federal, healthcare, defense, financial services, or other highly regulated environments.
- Experience with:
- NIST Risk Management Framework
- Enterprise Risk Management
- Cybersecurity Governance
- Compliance Assessments
- Audit Readiness
- Policy Development
- Security Metrics and Reporting
- Strong analytical, communication, and stakeholder engagement skills.
Education:
- Bachelor's degree in Cybersecurity, Information Systems, Public Policy, Business Administration, Computer Science, or related discipline.
License/Certification and Training:
Desired Certifications
-
One or more of the following:
- CISSP
- CISM
- CRISC
- CGRC
- CISA
- PMP
- ITIL
- Security+
Desired Experience:
- Experience supporting enterprise cybersecurity transformation initiatives.
- Experience working with executive governance organizations or leadership councils.
- Experience supporting privacy programs or data governance initiatives.
- Experience developing cybersecurity maturity assessments and improvement roadmaps.
- Experience supporting cloud governance, Zero Trust, or enterprise modernization efforts.
- Experience supporting large-scale federal technology or business transformation programs.
Clearance Requirements:
- Must be able to obtain a government public trust Clearance/background check
Standard Interview & Selection Process:
- Recruiter Pre-Screen
- If selected, Interview with Hiring Manager and/or Technical Lead
ERP International is a proven health and technology solutions integrator and partner for federal civilian and defense agencies. From military healthcare staffing, emerging technologies to medical logistics and business process management, we support and enhance mission performance, delivering high value, outcomes. ERP pursues innovative alternative solutions through attentive and engaged leadership practices, collaboration, and brilliant talent to drive transformational results for our customers.
ERP has been named a Washington Post 2024 Top Workplace by our employees for the 5th consecutive year, is an ELEV8 GovCon Honoree for 2024 and 2025.
Our Health Solutions practice provides our DOD and DHA customers with world-class capabilities in clinical staffing and medical research and readiness around the globe. We have decades of experience driving client success by providing the highest quality people and services, where and when they’re needed, at the most competitive rates.
ERP’s Digital Solutions practice provides our customers at CMS, DHA, DISA, DHS, FDA, FEMA and USCIS with world-class capabilities in emerging technologies, large scale modernization of legacy software, data visualization, Enterprise Architecture, IT health and cyber security. ERP’s value-based solutions deliver new efficiency and cost savings and do it on time and on budget.
Be the Best® is our motto. Our leadership-driven execution blends emerging technologies and passionate subject matter experts with mature processes to transform the way federal agencies. We appraise at CMMI DEV Maturity Level 5 and CMMI SVC Maturity Level 3 and are certified with the ISO 9001:2015 Quality Management Standard, ISO/IEC 20000-1:2011 Service Management System, and ISO 27001:2013 Information Security Management Standard.
Founded
2006
Company size
501-1,000 employees
Industry
Healthcare
Org type
Privately Held
Headquarters
Laurel, MD
ERP International is a proven health and technology solutions integrator and partner for federal civilian and defense agencies. From military healthcare staffing, emerging technologies to medical logistics and business process management, we support and enhance mission performance, delivering high value, outcomes. ERP pursues innovative alternative solutions through attentive and engaged leadership practices, collaboration, and brilliant talent to drive transformational results for our customers.
ERP has been named a Washington Post 2024 Top Workplace by our employees for the 5th consecutive year, is an ELEV8 GovCon Honoree for 2024 and 2025.
Our Health Solutions practice provides our DOD and DHA customers with world-class capabilities in clinical staffing and medical research and readiness around the globe. We have decades of experience driving client success by providing the highest quality people and services, where and when they’re needed, at the most competitive rates.
ERP’s Digital Solutions practice provides our customers at CMS, DHA, DISA, DHS, FDA, FEMA and USCIS with world-class capabilities in emerging technologies, large scale modernization of legacy software, data visualization, Enterprise Architecture, IT health and cyber security. ERP’s value-based solutions deliver new efficiency and cost savings and do it on time and on budget.
Be the Best® is our motto. Our leadership-driven execution blends emerging technologies and passionate subject matter experts with mature processes to transform the way federal agencies. We appraise at CMMI DEV Maturity Level 5 and CMMI SVC Maturity Level 3 and are certified with the ISO 9001:2015 Quality Management Standard, ISO/IEC 20000-1:2011 Service Management System, and ISO 27001:2013 Information Security Management Standard.
Founded
2006
Company size
501-1,000 employees
Industry
Healthcare
Org type
Privately Held
Headquarters
Laurel, MD