Information Security Risk Specialist

Booz Allen Hamilton•Albuquerque, NM

2d•$99,000 - $225,000•Onsite

About The Position

Conduct security assessments on Department of Defense (DoD) cloud environments using the Risk Management Framework (RMF). Provide guidance on policies and procedures to ensure compliance within an accreditation boundary, and implement security strategies to control and manage organizational information risks. Assess information systems to determine risk exposure and develop documentation addressing system security requirements. Enhance information security education within the organization and team, and monitor emerging security technologies to keep project personnel informed. The role is based in Albuquerque, New Mexico, with Oklahoma City, Oklahoma listed as an additional location. Remote work is not available. A Top Secret clearance is required. The projected annualized compensation range is $99,000 to $225,000.

Requirements

At least 5 years of experience in a cybersecurity role and with DoD RMF accreditation processes.
Experience with RMF, STIGs, NIST 800-53, NIST 800-37, or eMASS.
Experience implementing and maintaining security controls and working with cloud environments, including AWS.
Ability to conduct ACAS scans.
Ability to build ATO packages for Xacta or eMASS submission.
Ability to work through challenging security requirements and maintain compliance.
Ability to develop technical documentation to support accreditation efforts.
Top Secret clearance.
Bachelor’s degree.
IAM Level 1 or higher certification.

Nice To Haves

Experience as an ISSM.

Responsibilities

Conduct security assessments on DoD cloud environments using RMF.
Provide guidance on policies and procedures to ensure compliance within an accreditation boundary.
Implement security strategies to control and manage organizational information risks.
Assess information systems to determine risk exposure.
Develop documentation addressing system security requirements and supporting accreditation efforts.
Enhance information security education within the organization and team.
Monitor the latest security technologies to keep project personnel informed.