Lead enterprise and division-level risk assessments, maintain the enterprise risk register, monitor risk indicators and mitigation actions, and produce reports and dashboards for senior leadership. Evaluate policies, controls, audits, and compliance results; coordinate corrective actions; and improve risk management processes, tools, and workflows.
Plans and leads red team and penetration testing engagements across FSA systems while overseeing execution and reporting. Maintains testing tools and environments while ensuring alignment with NIST, MITRE ATT&CK, and DHS standards.
Oversees vulnerability management, remediation tracking, and communication with POA&M support. Leads ATO and continuous monitoring activities while developing dashboards and metrics for vulnerability management.
