Information Security Risk Specialist, Mid

Booz Allen Hamilton Inc.•Washington, DC

35d•$62,000 - $141,000

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this "cyber noise," how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action. As an Information Security Risk Specialist on our team, you'll work with aviation leaders to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You'll get technical, environmental, and personnel details from key stakeholders to assess the entire threat landscape. Then, you'll help your team guide your client through a plan of action with presentations, white papers, and milestones. You'll work on translating security concepts for your client so they can make the best decisions to secure our nation's aviation systems. This is your opportunity to take an active role in information security while growing your skills as well. Work with us as we protect our nation's airspace. Join us. The world can't wait.

Requirements

6+ years of experience with program control and governance, system security lifecycle management, ATOs , POA&Ms, vulnerability remediation, system privacy, System Security Officer (SSO) support, or threat modeling
Knowledge of policy management support, change management, cybersecurity engineering, requirements, and cybersecurity tools development
Knowledge of cybersecurity monitoring standards and enterprise security requirements or standards such as FIPS, NIST, Executive Orders, Notices, and Memoranda
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Bachelor's degree in Information Assurance, Information Management, IT, or CS
Industry-recognized Certification such as CISSP or CompTIA Security+ Certification