Cybersecurity Governance Analyst

Booz Allen Hamilton•Alexandria, VA

1d•$69,400 - $158,000

About The Position

The Opportunity: When our country’s cyber security is on the line, simply reacting is not enough, we need a plan. And when that plan needs to support our defense infrastructure, we need support for strategic policy development. That’s why we need you, a security specialist with the expertise required to analyze the policies that determine our cyber resilience. As a cyber strategic planning and policy specialist on our team, you’ll lead the assessment of your client’s current cyber policies, the coverage of those policies, and areas of risks. You’ll evaluate or audit how policies stack up to regulations, best practices, and industry standards. As you guide your client through understanding acceptable risk and availability, you’ll advance the development of a strategic cyber roadmap. You’ll work to ensure the client operates securely as they navigate an evolving IT environment. Work with us as we secure our nation’s critical infrastructure through support of strategic cyber policy development. Join us. The world can’t wait.

Requirements

10+ years of experience in services for the Federal government or Federal advising within a professional work environment
Experience drafting executive or senior-level correspondence or material to support decision-making
Experience in the cybersecurity or information assurance field
Experience supporting Federal organizations, including performing Action Officer duties and utilizing staffing processes or tools
Experience facilitating meetings including working groups and conferences and associated pre and post meeting activities such as agenda development and meeting minutes
Knowledge of Department of War cybersecurity programs such as RMF, CMMC, or Cloud
Secret clearance
Bachelor’s degree
CISM or CISSP Certification

Nice To Haves

Experience drafting technical documents, including technical policies and strategies, at the organization level
Experience with NIST SP 800 series publications such as 800-37, 800-53, 800-171, 800-171A, or 800-172
Experience incorporating requirements from laws, regulations, and/or government-wide policies into operational cybersecurity programs
Experience with intelligence analysis or risk analysis including assessing threats, vulnerabilities, and operational impacts in support of decision-making processes
Ability to effectively apply their concepts and requirements in both technical and strategic discussions
Possession of strong verbal and written communication skills
Possession of strong organizational, problem solving, and interpersonal skills
CMMC Certified Assessor (CCA) or CMMC Certified Professional (CCP) Certification

Responsibilities

Lead the assessment of your client’s current cyber policies, the coverage of those policies, and areas of risks.
Evaluate or audit how policies stack up to regulations, best practices, and industry standards.
Guide your client through understanding acceptable risk and availability.
Advance the development of a strategic cyber roadmap.
Ensure the client operates securely as they navigate an evolving IT environment.
Support strategic cyber policy development.
Perform Action Officer duties and utilize staffing processes or tools.
Facilitate meetings including working groups and conferences and associated pre and post meeting activities such as agenda development and meeting minutes.