Cybersecurity Risk Analyst

Booz Allen Hamilton•Alexandria, VA

2d•$62,000 - $141,000

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to the global enterprise. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action. As an information security risk specialist on our team, you’ll work with specific enterprises to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You’ll get technical and personnel details from SMEs to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, white papers, and milestones. You’ll work on translating security concepts for your client so they can make the best decisions to secure their critical infrastructure. This is your opportunity to take an active role in information security while growing your skills in cybersecurity. Work with us as we protect our nation’s cyber infrastructure. Join us. The world can’t wait.

Requirements

5+ years of experience in cybersecurity, including evaluating cybersecurity risk assessments or performing supply chain risk management analysis
Experience in services for the federal government or federal advising within a professional work environment
Experience using AI tools and collaboration and knowledge management products such as Microsoft Teams, SharePoint, Planner, Excel, Access, and scripting languages
Experience drafting, editing, and collaborating on executive or senior-level correspondence, information papers, and briefing decks to support decision-making
Experience planning and facilitating meetings, including working groups or conferences, and associated pre- and post-meeting activities
Knowledge of the DoD cybersecurity program
Top Secret clearance
Bachelor’s degree in Computer Science, Information Systems, Engineering, Mathematics, or Physics

Nice To Haves

Experience supporting DoD-level organizations, including Action Officer duties, coordination, and staffing processes or tools
Knowledge of NIST 800 series publications and FISMA
Knowledge of DoD issuances, including DoDI and DoDD, and Joint Publications
Knowledge of DoW IT, Cybersecurity, Supply Chain Risk Management (SCRM), and Cyber-SCRM and Information and Communications Technology SCRM policy
Ability to lead cross-functional initiatives where goals and parameters may evolve over time
Ability to brief and collaborate with a varied stakeholders’ experience level, from junior to executive or senior leadership
Possession of excellent organizational, problem solving, interpersonal, and verbal and written communication skills

Responsibilities

Discover their cyber risks
Understand applicable policies
Develop a mitigation plan
Assess the entire threat landscape
Guide your client through a plan of action with presentations, white papers, and milestones
Translate security concepts for your client so they can make the best decisions to secure their critical infrastructure