Aviation Cyber Security Policy Lead

Booz Allen Hamilton•Washington, DC

12d

About The Position

Aviation Cyber Security Policy Lead The Opportunity: When our country’s cyber security is on the line, simply reacting is not enough—we need a plan. And when that plan needs to support our nation’s airspace and aviation safety systems, we need strategic development. That’s why we need you, a security policy specialist with the expertise required to guide a team analyzing the policies that determine our cyber resilience. As a cyber strategic planning specialist on our team, you’ll oversee staff working on the assessment of the FAA’s current cyber policies, the coverage of those policies, and areas of risk. You’ll evaluate how policies stack up to regulations, best practices, and industry standards. As you guide your client through understanding acceptable risk and availability, you’ll lead the team in the development of a strategic cyber roadmap. You’ll work with the client to ensure they operate securely as they navigate an evolving IT environment. Work with us as we secure our nation’s airspace through strategic cyber policy development. Join us. The world can’t wait.

Requirements

7+ years of experience with Databricks
7+ years of experience with monitoring Government policy and cybersecurity standards, including analyzing, reviewing, and implementing cybersecurity policies and procedures
Experience advising on best practices for information and systems security, working with system owners and business managers to evaluate cyber risks for IT systems, and educating federal clients on the impact of existing and emerging systems and information security frameworks, legislation, and trends
Experience applying computer science technologies to the design, development, evaluation, and integration of computer systems and networks to maintain system security and provide information assurance
Experience developing, managing, and maintaining plans and SOPs
Knowledge of security architectures, electronic data traffic, network access, encryption technology, penetration and vulnerability analysis of security technologies, information technology security research, and Software Development Lifecycle (SDLC)
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Bachelor's degree
CISSP or CompTIA Security+ Certification

Nice To Haves

Experience with DevSecOps
Knowledge of Cybersecurity Supply Chain Risk Management (C-SCRM)
Ability to support system-specific enterprise security solutions in development lifecycle activities, including requirements definition, implementation planning, integration, and functional testing activities
Bachelor's degree in Information Assurance, Information Management, Information Technology, or Computer Science