Posted August 05, 2026
Associate Director Risk Services
Cybersecurity and Infrastructure Security Agency
Arlington, VA
Full Time
Reference: CybersecurityandInfrastructureSecurityAgency878951500
This position is located within the Cybersecurity and Infrastructure Security Agency (CISA), National Risk Management Center (NRMC), Risk Services Division, in Arlington, VA. The NRMC's mission is to provide actionable risk analysis to drive secure and resilient critical infrastructure for the American People. No Educational Substitution: There is no substitution of education for experience at this grade level. You must meet the qualifications listed in the "Requirements" section of this announcement. This position serves as the Associate Director of the Risk Services Division within NRMC. The incumbent will be responsible for overseeing risk analysis and collaboration with public-private cyber and physical security partners to mitigate risk to National Critical Functions - those functions of government and the private sector so vital to the United States that their disruption, corruption, or dysfunction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof. Specifically, the incumbent will contribute to driving consistent and coherent understandings of risk throughout the critical infrastructure community and enable improved collaborative risk management-with an emphasis on mitigation-across the critical infrastructure community.
Additional duties include, but are not limited to:
To meet the minimum qualification requirements for this position, you must show that you possess the Executive Core Qualifications (ECQ) and Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit, will not be reviewed beyond page 2 or may be disqualified. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position.
There is NO requirement to prepare a narrative statement specifically addressing the Executive Core Qualifications (ECQs) or the Technical Qualifications (TQs). A sample 2-pages resume that incorporates ECQs and TQs can be viewed on this link (indexed at page 16 - 17) Guide to Senior Executive Service Qualifications and the Qualifications Review Board.
TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications.
TQ 1:
Demonstrated experience in developing and conducting comprehensive risk assessments and decision support processes that involve modeling and simulation, vulnerability and consequence analysis, analytic production, risk prioritization frameworks or similar activities in the context of general risk analysis and deriving data driven outcomes.
TQ 2:
Expert knowledge of organizational (to include budget) and program management theories, principles and techniques including change management and/or organizational process and culture improvements.
EXECUTIVE CORE QUALIFICATIONS (ECQs): In addition to the Technical Qualification Requirements listed above, all new entrants into the Senior Executive Service (SES) under a career appointment will be assessed for executive competency against the following five mandatory ECQs. If your 2-page resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for the position.
There are five ECQs:
Additional duties include, but are not limited to:
- Lead valuable risk analysis outputs and collaborating risk management activities across CISA, DHS, with other federal agencies, and with external partners and stakeholders. As a Senior Leader in NRMC, the role involves fostering excellence through an unwavering focus on people, culture, and organization and cultivating a clear brand that reflects and reinforces the role, purpose, and value of NRMC.
- Provide executive leadership, guidance, and mentorship to a large and diverse team of strategic, operational, technical, and analytic professionals across a variety of grade and experience levels in the areas of:
- Risk Analysis and Prioritization: Assess, refine, validate, and communicate risks to critical infrastructure; provide analytic support to agency-wide priority efforts; deliver comprehensive sector and cross-sector risk assessments for a wide range of use cases; apply dynamic use of analytic capability and data operationalization; and build and maintain unique analytic production.
- Risk Management Coordination and Governance: Partner with internal and external subject matter experts and stakeholders across CISA, other federal agencies, and the private sector through working groups and steering committees focused on risk management. Pursue CISA and DHS coordination efforts to maximize service delivery, customer satisfaction, and NRMC's ability to fulfill its mission.
- Operational Priorities and Initiatives Management: Lead priority initiatives aligned with NRMC goals and objectives and contribute to ongoing real time assessment of resourcing trade-offs across areas of focus. Maintain a clear set of operational priorities for the Risk Services Division based on requirements and strategic goals while achieving completion of priority projects.
- Analysis Planning, Requirements, and Administration: Develop and provide the direction for NRMC risk services analysis, coordination, and decision support; validate requirements and maintain a continuously relevant menu of services; standardize analytic methodologies and develop SOPs for delivery of analytic products and acquisition of contract support.
- Perform comprehensive first and second line supervisory duties, while also planning for succession, surge/growth preparedness, and career and professional development growth opportunities for staff members across all levels to fill skill gaps and maximize employee engagement, satisfaction, and retention.
- Provide leadership and guidance for planning, allocating resources to, and developing long-range goals and milestones that support mission and strategic objectives; provides subject matter expertise ensuring plans and programs are budgeted for and are ready for implementation to support CISA goals and milestones; defines objectives and makes decisions that impact cost and performance of the operations, systems, policies and personnel for NRMC; and reviews program activities to ensure policy compliance and agreement with administration and department goals and objectives.
- Collaborate with counterparts across DHS, the government and industry; identifies information and capability needs to execute the mission; and speaks on behalf of the organization with public private partners and organizations, Congress, the White House, Government Accountability Office, Policy Coordinating Committees and working groups, external conferences, interagency meetings, and other forums.
To meet the minimum qualification requirements for this position, you must show that you possess the Executive Core Qualifications (ECQ) and Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit, will not be reviewed beyond page 2 or may be disqualified. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position.
There is NO requirement to prepare a narrative statement specifically addressing the Executive Core Qualifications (ECQs) or the Technical Qualifications (TQs). A sample 2-pages resume that incorporates ECQs and TQs can be viewed on this link (indexed at page 16 - 17) Guide to Senior Executive Service Qualifications and the Qualifications Review Board.
TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications.
TQ 1:
Demonstrated experience in developing and conducting comprehensive risk assessments and decision support processes that involve modeling and simulation, vulnerability and consequence analysis, analytic production, risk prioritization frameworks or similar activities in the context of general risk analysis and deriving data driven outcomes.
TQ 2:
Expert knowledge of organizational (to include budget) and program management theories, principles and techniques including change management and/or organizational process and culture improvements.
EXECUTIVE CORE QUALIFICATIONS (ECQs): In addition to the Technical Qualification Requirements listed above, all new entrants into the Senior Executive Service (SES) under a career appointment will be assessed for executive competency against the following five mandatory ECQs. If your 2-page resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for the position.
There are five ECQs:
- ECQ 1: Commitment to the Rule of Law and the Principles of the American Founding - This core qualification requires a demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people.
- ECQ 2: Driving Efficiency - This core qualification involves the demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades.
- ECQ 3: Merit and Competence - This core qualification involves the demonstrated knowledge, ability and technical competence to effectively and reliably produce work that is of exceptional quality.
- ECQ 4: Leading People - This core qualification involves the demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable.
- ECQ 5: Achieving Results - This core qualification involves the demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors.
