Information Security Risk Specialist

Booz Allen Hamilton•Atlanta, GA

1d•$99,000 - $225,000•Onsite

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—an information security risk specialist who will break down complex threats into manageable plans of action. As an information security risk specialist on our team, you’ll use your experience to work with the client to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You’ll review technical and personnel details from SMEs and engineers to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts, so they can make the best decisions to secure their missions critical systems. This is your opportunity to act as a cyber security subject matter expert while broadening your skills evolving health IT solutions. Join us as we support the mission to provide global health solutions and response. This position is located in Atlanta, GA. Work with us as we protect Public Health data modernization. Join us. The world can't wait.

Requirements

5+ years of experience in an information security role
3+ years of experience with supporting federal FISMA requirements
Experience with network, server, database or application scanning tools such as Nessus, AppScan, Fortify, Web Inspect, or Squirrel
Experience translating vulnerability scan results into findings aligned to NIST SP 800-53 security controls
Knowledge of Federal Cyber Requirements and guidelines such as NIST 800–37, NIST 800-39, NIST 800–53, NIST 800-53a, FIPS 199, and OMB A-130
Knowledge of Network security for platforms such as Windows, Oracle, SQL Server, Cisco IOS, and Firewalls
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Bachelor’s degree

Nice To Haves

Experience with CDC processes, data modernization efforts, and federal IT environments
Knowledge of Network security for platforms such as Windows, Oracle, SQL Server, Cisco IOS, and Firewalls
Possession of excellent verbal and written communication skills
8500-compliant certification

Responsibilities

Work with the client to discover their cyber risks, understand applicable policies, and develop a mitigation plan.
Review technical and personnel details from SMEs and engineers to assess the entire threat landscape.
Guide your client through a plan of action with presentations, white papers, and milestones.
Translate security concepts so clients can make the best decisions to secure their missions critical systems.