{"id":138581,"url":"https://alion.io/job/guidehouse-cybersecurity-grc-program-manager","title":"Cybersecurity GRC Program Manager","company":{"id":4179,"name":"Guidehouse","domain":"guidehouse.com","url":"https://alion.io/company/guidehouse","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":102,"ghost_share":0,"stale_share":0.706,"repost_share":0.039,"time_to_fill_p50_days":28,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Arlington, United States","Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130000,"max":216000,"currency":"USD","period":"year","gross":null,"usd_annual":216000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"Zero Trust","optional":false},{"name":"FedRAMP","optional":true}],"status":"live","first_seen_at":"2026-08-26T00:00:00Z","employer_posted_date":"2026-08-26","last_verified_at":"2026-10-31T05:11:30Z","board_verified":true,"closed_at":null,"days_open":66,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":66},"description":"Job Family:\nCyber ConsultingTravel Required:\nUp to 10% Clearance Required:\nActive Top Secret (TS)What You Will Do\nGuidehouse is seeking an experienced Cybersecurity Governance, Risk, and Compliance (GRC) Program Manager to lead a large, complex federal cybersecurity program supporting enterprise security operations, cybersecurity governance, risk management, compliance, authorization, continuous monitoring, and cyber engineering activities.\n\nThe Managing Consultant will serve as the primary contractor Program Manager and authorized interface between Guidehouse, the Contracting Officer's Representative (COR), Government Program Manager (GPM), government stakeholders, and customer agency leadership. The successful candidate will provide strategic leadership, program oversight, workforce management, and quality assurance across all contracted cybersecurity activities.\n\nThis role requires a highly experienced cybersecurity leader with demonstrated success managing large-scale federal cybersecurity programs, directing multidisciplinary teams, overseeing contract performance, and delivering mission-critical cybersecurity services in highly complex environments. This position requires onsite client support five (5) days per week in the Washington Metropolitan Area.\n\nKey Responsibilities\nServe as the primary client-facing lead and trusted advisor for the cybersecurity program, managing relationships with executive stakeholders, government leadership, and customer representatives.\n\nAct as the contractor's authorized representative for all programmatic, operational, technical, staffing, and contractual matters.\n\nProvide overall leadership, direction, and management of program personnel, subcontractors, and program resources.\n\nFormulate and enforce work standards, operating procedures, quality control processes, and performance metrics across all contract activities.\n\nManage staffing plans, workforce utilization, employee development, performance management, and resource allocation to ensure successful contract execution.\n\nPlan, organize, prioritize, and oversee multiple cybersecurity initiatives, ensuring delivery of all contract requirements within schedule, scope, quality, and budget constraints.\n\nOversee program financial management, including labor forecasting, resource planning, budget monitoring, and contract performance management.\n\nLead program governance activities, including executive briefings, status reporting, risk management, issue resolution, and strategic planning discussions with government leadership.\n\nReview, approve, and ensure quality of all program deliverables, reports, security documentation, and work products prior to submission to the client.\n\nCoordinate enterprise cybersecurity planning, authorization, risk management, continuous monitoring, engineering, operations, and incident response activities across multiple stakeholders and technical teams.\n\nEnsure alignment with federal cybersecurity mandates and frameworks including NIST Risk Management Framework (RMF), FISMA, OMB guidance, CISA directives, Zero Trust initiatives, and agency-specific cybersecurity requirements.\n\nLead cross-functional teams supporting: Cybersecurity Governance, Risk Management, Security Authorization (ATO), Continuous Monitoring, Security Control Assessments, POA&M Management, Vulnerability Management, Incident Response Coordination, Cybersecurity Engineering, Enterprise Security Operations\n\nEstablish and maintain effective communication channels with government stakeholders to proactively identify and resolve programmatic, operational, and technical issues.\n\nDevelop and maintain integrated project schedules, performance metrics, staffing plans, and program roadmaps to drive delivery excellence and customer satisfaction.\n\nIdentify program risks and develop mitigation strategies while ensuring compliance with contractual, regulatory, and organizational requirements.\n\nContribute to Guidehouse growth initiatives through thought leadership, proposal support, recruiting, mentoring, and business development activities.\n\nWhat You Will Need\nAn ACTIVE and MAINTAINED \"SECRET\" Federal or DoD security clearance\n\nUS citizenship is required\n\nBachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, Business Administration, or related field (additional years of relevant experience may be substituted for degree requirements where applicable)\n\nMINIMUM of 10 (TEN) years of progressive experience leading cybersecurity, risk management, compliance, or information security programs.\n\nMINIMUM of 5 (FIVE) years of experience managing large federal cybersecurity contracts, programs, or operations.\n\nDemonstrated experience serving as a Program Manager, Task Order Manager, Engagement Manager, or equivalent leadership role supporting federal government clients.\n\nProven experience leading multidisciplinary teams across cybersecurity operations, governance, risk management, compliance, engineering, and security assessment functions.\n\nStrong understanding of: NIST Risk Management Framework (RMF), FISMA, NIST SP 800 Series, Continuous Monitoring Programs, Security Authorization Processes, Cybersecurity Governance and Risk Management, Enterprise Security Operations, Vulnerability Management, Federal Cybersecurity Compliance Requirements\n\nDemonstrated success managing client relationships and communicating effectively with executive stakeholders, technical teams, and government leadership.\n\nExceptional leadership, organizational, analytical, and communication skills.\n\nProven ability to prioritize competing priorities and manage multiple complex workstreams in a dynamic environment.\n\nDoD 8570/8140 IAM Level III Certification preferred (IAM Level II minimum required); and/or CSSP Manager Certification. Examples include: CISSP, CISM, GSLC, CCISO, CASP+, Other certifications satisfying DoD IAM Level II or III requirements\n\nWhat Would Be Nice To Have\nMaster's degree in Cybersecurity, Information Technology, Information Assurance, Public Administration, Business Administration, or related discipline.\n\nProject Management Professional (PMP) certification.\n\nExperience supporting Cabinet-level agencies, Department of State, DHS, DoD, or other federal civilian agencies.\n\nExperience leading large cybersecurity governance and compliance programs exceeding 20+ personnel.\n\nExperience supporting enterprise cyber modernization, Zero Trust, Continuous Diagnostics and Mitigation (CDM), or Security Operations Center (SOC) initiatives.\n\nExperience managing hybrid teams consisting of cybersecurity engineers, ISSOs, assessors, analysts, and compliance specialists.\n\nFamiliarity with FedRAMP, CMMC, cloud security governance, and emerging federal cybersecurity mandates.\n\nThe annual salary range for this position is $130,000.00-$216,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs. What We Offer:\nGuidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.\nBenefits include:\nMedical, Rx, Dental & Vision Insurance\n\nPersonal and Family Sick Time & Company Paid Holidays\n\nPosition may be eligible for a discretionary variable incentive bonus\n\nParental Leave and Adoption Assistance\n\n401(k) Retirement Plan\n\nBasic Life & Supplemental Life\n\nHealth Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts\n\nShort-Term & Long-Term Disability\n\nStudent Loan PayDown\n\nTuition Reimbursement, Personal Development & Learning Opportunities\n\nSkills Development & Certifications\n\nEmployee Referral Program\n\nCorporate Sponsored Events & Community Outreach\n\nEmergency Back-Up Childcare Program\n\nMobility Stipend\n\nAbout Guidehouse\nGuidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.\nGuidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.\nIf you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.\nAll communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.\nIf any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.\nGuidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.","description_format":"text","description_chars":10015,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":true,"languages":[]},"benefits":["Parental leave","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Digital Government","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-08-26T00:00:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 24 · green card filings: 14","filings_12m":24,"filings_prev_12m":23,"green_card_filings_12m":14,"median_offered_wage_usd":132500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.45,"p_room":0.28,"age_days":66,"expected_fill_days":28,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":216000,"is_top_pay":true},"html_url":"https://alion.io/job/guidehouse-cybersecurity-grc-program-manager","json_url":"https://alion.io/job/guidehouse-cybersecurity-grc-program-manager.json","meta":{"generated_at":"2026-10-31T12:46:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19715,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4179},"rest":"https://alion.io/mcp/rest/get_company?id=4179"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fguidehouse-cybersecurity-grc-program-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fguidehouse-cybersecurity-grc-program-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fguidehouse-cybersecurity-grc-program-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/guidehouse-cybersecurity-grc-program-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fguidehouse-cybersecurity-grc-program-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":138581}},{"tool":"search_jobs","arguments":{"company":"guidehouse.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":138581},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}