Governance, Risk, and Compliance

1. At least 5 years of experience performing the functions associated with this labor category.

2. An understanding of relevant laws and regulations, such as NIST guidance and OMB memoranda.

3. Experience developing and implementing compliance programs, conducting risk assessments, and advising on compliance-related issues.

4. Experience assessing and mitigating risks associated with cybersecurity and data privacy, including the management of POA&Ms.

5. Experience using governance, risk, and compliance tools, including using them to collect and report on security and privacy metrics.

6. Experience communicating complex regulatory and compliance information in a clear and concise manner