Cyber Compliance Specialist

Booz Allen Hamilton•Arlington, VA

5d•Remote

About The Position

Designs, implements, and manages policies and procedures to ensure database and software security. Applies specific functional knowledge and working and general industry knowledge. Develops or contributes to solutions to a variety of problems of moderate scope and complexity. Works independently with some guidance, and reviews or guides activities of junior employees.

Requirements

5+ years of experience interpreting and applying enterprise cybersecurity policies such as Acceptable Use of IT Assets or Information Security policy
Experience conducting cyber risk assessments, evidence reviews, and compliance checks
Experience with IA or cybersecurity the areas of IA policies and procedures including Privacy, NIST, RMF, and FISMA
Secret clearance
Bachelor's degree
CompTIA Advance Security Practitioner (CASP+)
CompTIA Security+
Systems Security Certified Practitioner (SSCP) certification
DoD 8140 or CWF-aligned certifications

Nice To Haves

Experience working with continuous compliance platforms or automated compliance tooling such as Vellox Navigator™ for regulated environments
Experience synthesizing cyber risk, system posture, and compliance gaps into actionable remediation plans
Experience supporting continuous RMF compliance cycles, risk mitigation workflows, and security‑control documentation
Knowledge of industry standard tools such as Tenable, or Splunk
Ability to lead or coordinate compliance readiness for audits, assessments, or enterprise governance activities

Responsibilities

Designs, implements, and manages policies and procedures to ensure database and software security.
Applies specific functional knowledge and working and general industry knowledge.
Develops or contributes to solutions to a variety of problems of moderate scope and complexity.
Works independently with some guidance, and reviews or guides activities of junior employees.
Experience working with continuous compliance platforms or automated compliance tooling such as Vellox Navigator™ for regulated environments
Synthesizing cyber risk, system posture, and compliance gaps into actionable remediation plans
Supporting continuous RMF compliance cycles, risk mitigation workflows, and security‑control documentation
Knowledge of industry standard tools such as Tenable, or Splunk
Ability to lead or coordinate compliance readiness for audits, assessments, or enterprise governance activities