Information Security Risk Specialist

Booz Allen Hamilton • Usa, MD

3d

About The Position

As an Information Security Risk Specialist, you will help government and military clients understand cyber risks and develop manageable mitigation plans. You will assist military leaders in identifying cyber risks, interpreting applicable policies, and planning risk mitigation. The role involves gathering technical and personnel details from subject matter experts to assess the threat landscape, guiding clients through action plans using presentations, white papers, and milestones, and translating security concepts to support decisions that protect critical systems. The position offers an opportunity to build experience in a strategic information security role while developing cybersecurity skills.

Requirements

• At least 3 years of experience leading and executing Navy Risk Management Framework (RMF), including full lifecycle implementation across all RMF steps, application of Navy SOPs and cybersecurity directives, and ownership of POA&Ms.
• Experience with eMASS and ACAS, including scan-result analysis and prioritization, hardware and software inventory development and maintenance, and vulnerability management using SCAP, VRAM, and HBSS.
• Experience reviewing, interpreting, and enforcing STIGs using STIG Viewer.
• Experience developing and supporting SAPs and SARs in alignment with Navy RMF requirements.
• Knowledge of Ports, Protocols, and Services Management (PPSM).
• Ability to work in a structured, compliance-driven environment and execute established cybersecurity processes with minimal supervision.
• Secret clearance; applicants are subject to a security investigation and may need to meet eligibility requirements for access to classified information.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Science, or Software Engineering.
• DoD 8140 or 752- Cyber Policy and Strategy Planner Certification.

Nice To Haves

• Top Secret clearance.
• Master's degree.

Responsibilities

• Assist military leaders in discovering cyber risks and understanding applicable policies.
• Develop plans to mitigate identified risks.
• Gather technical and personnel details from subject matter experts to assess the threat landscape.
• Guide clients through plans of action using presentations, white papers, and milestones.
• Translate security concepts to help clients make decisions about securing critical systems.
• Lead and execute the Navy Risk Management Framework (RMF), including full lifecycle implementation across all RMF steps.
• Apply Navy standard operating procedures and cybersecurity directives, and own Plans of Action and Milestones (POA&Ms).
• Analyze and prioritize ACAS scan results; develop and maintain hardware and software inventories; and manage vulnerabilities using SCAP, VRAM, and HBSS.
• Review, interpret, and enforce Security Technical Implementation Guides (STIGs) using STIG Viewer.
• Develop and support Security Assessment Plans (SAPs) and Security Assessment Reports (SARs) in alignment with Navy RMF requirements.
• Apply knowledge of Ports, Protocols, and Services Management (PPSM).
• Execute established cybersecurity processes with minimal supervision in a structured, compliance-driven environment.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level