Security Governance Lead (Project Management)
Sierra7, Inc. is seeking an experienced Security Governance Lead who will provide subject matter expertise and support in developing, implementing, and overseeing security governance policies, controls, and compliance frameworks for the Department of Veterans Affairs Office of Inspector General (VA OIG) Enterprise Architecture (EA) Modernization initiative. This role ensures modernization efforts align with federal cybersecurity standards, risk management practices, and governance requirements while promoting secure adoption of new tools, processes and technologies. The Security Governance Lead will serve as an advisor on information security, risk, and compliance issues, working closely with program leadership, stakeholders, and architects.
This is a TEMPORARY (6 months) full-time position in the Washington, DC area and onsite work will be necessary.
Position Responsibilities:
Support the design and implementation of security governance policies and EA modernization frameworks, including guidelines and procedures for securing IT systems and protecting data, security controls (e.g., measures such as firewalls, encryption, intrusion detection/prevention systems, etc.), data protection mechanisms, endpoint security elements, and auditing and logging requirements.
Ensure alignment with federal security regulations, including FISMA, HIPPA, GDRP, and other VA-specific cybersecurity policies.
Define and monitor security roles, responsibilities, and accountability structures across modernization activities.
Conduct risk assessments, control reviews, and compliance audits to identify gaps and recommend mitigations.
Assist in establishing governance processes for secure data management, access control, and identity management.
Provide oversight and contribute to the delivery of security-related deliverables and documentation.
Collaborate with enterprise architects, program managers, and training specialists to integrate security requirements into modernization deliverables and artifacts.
Develop and deliver stakeholder briefings on security governance posture.
Stay current with evolving federal security regulations, frameworks, and best practices, and make recommendations accordingly.
