Information Security Risk Specialist

Booz Allen Hamilton

1d•$61,900 - $141,000

About The Position

As an Information Security Risk Specialist, you will help government and military clients understand cyber risks and develop plans to mitigate them. You will support military leaders by identifying cyber risks, interpreting applicable policies, and developing mitigation plans. The role involves gathering technical and personnel information from subject matter experts to assess the threat landscape, then guiding clients through action plans using presentations, white papers, and milestones. You will translate security concepts into practical information that supports decisions about protecting critical systems.

Requirements

At least 3 years of experience leading and executing Navy Risk Management Framework (RMF), including full lifecycle implementation across all RMF steps, application of Navy SOPs and cybersecurity directives, and ownership of POA&Ms.
Experience with eMASS and ACAS, including scan-result analysis and prioritization, hardware and software inventory development and maintenance, and vulnerability management using SCAP, VRAM, and HBSS.
Experience reviewing, interpreting, and enforcing STIGs using STIG Viewer.
Experience developing and supporting SAPs and SARs in alignment with Navy RMF requirements.
Knowledge of Ports, Protocols, and Services Management (PPSM).
Ability to work in a structured, compliance-driven environment and execute established cybersecurity processes with minimal supervision.
Secret clearance.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Science, or Software Engineering.
DoD 8140 or 752- Cyber Policy and Strategy Planner Certification.

Nice To Haves

Top Secret clearance.
Master’s degree.

Responsibilities

Help military leaders discover and understand cyber risks.
Interpret applicable policies and develop risk mitigation plans.
Gather technical and personnel details from subject matter experts to assess the threat landscape.
Guide clients through plans of action using presentations, white papers, and milestones.
Translate security concepts to support decisions about securing critical systems.
Lead and execute Navy Risk Management Framework (RMF) implementation across its full lifecycle.
Apply Navy standard operating procedures and cybersecurity directives, and own Plans of Action and Milestones (POA&Ms).
Analyze and prioritize ACAS scan results and support vulnerability management.
Develop and maintain hardware and software inventories.
Review, interpret, and enforce Security Technical Implementation Guides (STIGs).
Develop and support Security Assessment Plans (SAPs) and Security Assessment Reports (SARs) aligned with Navy RMF requirements.