Cybersecurity Risk Analyst

Booz Allen Hamilton • Washington, DC

21h • $69,400 - $158,000

About The Position

As a cybersecurity risk and policy specialist, you will help assess and strengthen a client’s cybersecurity resilience. You will review current cyber policies, evaluate their coverage and identify areas of risk. Working with the information security office, you will review risk acceptance requests and assess overall risk, while collaborating with information system stakeholders to develop clear risk acceptance justifications. You will help clients understand acceptable risk and availability, contribute to a strategic cyber roadmap, and support secure operations in an evolving IT environment.

Requirements

• At least 2 years of experience with NIST 800-53.
• Experience with cybersecurity risk analysis matters.
• Knowledge of cybersecurity strategy, governance, and policies within the federal space.
• Knowledge of cyber frameworks, including the Risk Management Framework (RMF) and NIST Cybersecurity Framework (CSF).
• Knowledge of FISMA, NIST 800-37 RMF, FedRAMP, security control assessments, POA&M management, risk management, and continuous monitoring.
• Ability to perform data analysis and report findings.
• Public Trust determination is required; applicants selected will be subject to a government investigation and may need to meet the U.S. government client’s eligibility requirements.
• Bachelor's degree.

Nice To Haves

• Experience with RSA Archer.
• Experience with policy documentation.
• Experience conducting IT audits.
• Excellent verbal and written communication skills, including the ability to develop engaging presentations.
• Security+, CAP, CISSP, CISA, or CISM certification.

Responsibilities

• Review client cybersecurity policies, their coverage, and areas of risk.
• Review risk acceptance requests with the information security office and assess overall risk.
• Collaborate with information system stakeholders to develop risk acceptance justifications.
• Help clients understand acceptable risk and availability.
• Contribute to development of a strategic cyber roadmap.
• Help ensure the client operates securely in an evolving IT environment.
• Perform data analysis and report findings.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level