Cybersecurity Risk Analyst

Booz Allen Hamilton • Washington, DC

2h • $69,400 - $158,000 • Onsite

About The Position

The Cybersecurity Risk Analyst will support strategic cyber planning and policy development for a government client. The role reviews existing cybersecurity policies, their coverage, and areas of risk; works with the information security office to review risk acceptance requests and assess overall risk; and collaborates with information system stakeholders to develop clear risk acceptance justifications. The analyst helps the client understand acceptable risk and availability, develops a strategic cyber roadmap, and supports secure operations in an evolving IT environment.

Requirements

• At least 2 years of experience with NIST 800-53.
• Experience with cybersecurity risk analysis matters.
• Knowledge of cybersecurity strategy, governance, and policies within the federal space.
• Knowledge of cyber frameworks, including the Risk Management Framework (RMF) and NIST Cybersecurity Framework (CSF).
• Knowledge of FISMA, NIST 800-37 RMF, FedRAMP, security control assessments, POA&M management, risk management, and continuous monitoring.
• Ability to perform data analysis and report findings.
• Public Trust determination is required; selected applicants will be subject to a government investigation and may need to meet the U.S. government client’s eligibility requirements.
• Bachelor’s degree.

Nice To Haves

• Experience with RSA Archer.
• Experience with policy documentation.
• Experience conducting IT audits.
• Excellent verbal and written communication skills, including developing engaging presentations.
• Security+, CAP, CISSP, CISA, or CISM certification.

Responsibilities

• Review the client’s current cybersecurity policies, policy coverage, and areas of risk.
• Work with the information security office to review risk acceptance requests and assess overall risk.
• Collaborate with information system stakeholders to develop risk acceptance justifications.
• Help the client understand acceptable risk and availability.
• Help develop a strategic cyber roadmap.
• Support secure client operations in an evolving IT environment.
• Perform data analysis and report findings.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level