Cybersecurity Risk Analyst

Booz Allen Hamilton • Usa, DC

14h

About The Position

The Cybersecurity Risk Analyst will support strategic cyber planning and policy development for a government client. The role involves reviewing current cybersecurity policies, their coverage, and areas of risk; working with the information security office to review risk acceptance requests and assess overall risk; and collaborating with information system stakeholders to develop clear risk acceptance justifications. The analyst will help the client understand acceptable risk and availability, develop a strategic cyber roadmap, and operate securely in an evolving IT environment.

Requirements

• At least 2 years of experience with NIST 800-53.
• Experience with cybersecurity risk analysis matters.
• Knowledge of cybersecurity strategy, governance, and policies within the federal space.
• Knowledge of cyber frameworks, including the Risk Management Framework (RMF) and NIST Cybersecurity Framework (CSF).
• Knowledge of FISMA, NIST 800-37 RMF, FedRAMP, security control assessments, POA&M management, risk management, and continuous monitoring.
• Ability to perform data analysis and report findings.
• Public Trust determination is required.
• Bachelor's degree.

Nice To Haves

• Experience with RSA Archer.
• Experience with policy documentation.
• Experience conducting IT audits.
• Excellent verbal and written communication skills, including developing engaging presentations.
• Security+, CAP, CISSP, CISA, or CISM certification.

Responsibilities

• Review the client's current cybersecurity policies, policy coverage, and areas of risk.
• Review risk acceptance requests with the information security office and assess overall risk.
• Collaborate with information system stakeholders to develop risk acceptance justifications.
• Help the client understand acceptable risk and availability.
• Help develop a strategic cyber roadmap.
• Perform data analysis and report findings.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level