Cyber Compliance Specialist

Booz Allen Hamilton•Arlington, VA

21h•Remote

About The Position

Assists in designing, implementing, and managing policies and procedures to ensure database and software security. Applies specific functional knowledge, working and general industry knowledge. Develops or contributes to solutions to a variety of problems of moderate scope and complexity. Works independently with some guidance, and reviews or guides activities of junior employees.

Requirements

5+ years of experience in assisting with interpreting and applying enterprise cybersecurity policies, such as Acceptable Use of IT Assets or Information Security policy
Experience with conducting cyber risk assessments, evidence reviews, and compliance checks
Experience with IA or cybersecurity in the areas of IA policies and procedures, including Privacy, NIST, RMF, and FISMA
Secret clearance
Bachelor's degree
DoD 8140 or Cyberspace Workforce (CWF) Certification, such as CompTIA Advance Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP) Certification

Nice To Haves

Experience working with continuous compliance platforms or automated compliance tooling such as Vellox Navigator for regulated environments
Experience synthesizing cyber risk, system posture, and compliance gaps into actionable remediation plans
Experience supporting continuous RMF compliance cycles, risk mitigation workflows, and security-control documentation
Knowledge of industry standard tools such as Tenable, or Splunk
Ability to lead or coordinate compliance readiness for audits, assessments, or enterprise governance activities

Responsibilities

Designing, implementing, and managing policies and procedures to ensure database and software security.
Interpreting and applying enterprise cybersecurity policies.
Conducting cyber risk assessments, evidence reviews, and compliance checks.
Synthesizing cyber risk, system posture, and compliance gaps into actionable remediation plans.
Supporting continuous RMF compliance cycles, risk mitigation workflows, and security-control documentation.
Leading or coordinating compliance readiness for audits, assessments, or enterprise governance activities.