Information Security Risk Specialist

Booz Allen Hamilton•Albuquerque, NM

About The Position

Conduct security assessments on DoD cloud environments using the Risk Management Framework (RMF). Assist with guidance on policies and procedures to ensure compliance within an accreditation boundary. Implement security strategies to control and manage organizational information risks. Assess information systems to determine risk exposure and develop documentation addressing system security requirements. Enhance information security education within the organization and team, and monitor the latest security technologies to keep project personnel informed. The role requires a Top Secret clearance and a bachelor’s degree. The projected annual compensation range is $99,000 to $225,000. Booz Allen offers health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards, subject to eligibility requirements.

Requirements

At least 5 years of experience in a cybersecurity role and with DoD RMF accreditation processes.
Experience with RMF, STIGs, NIST 800-53, NIST 800-37, or eMASS.
Experience implementing and maintaining security controls and working with cloud environments, including AWS.
Ability to conduct ACAS scans.
Ability to build ATO packages for Xacta or eMASS submission.
Ability to work through challenging security requirements and maintain compliance.
Ability to develop technical documentation to support accreditation efforts.
Top Secret clearance.
Bachelor’s degree.
IAM Level 1 or higher certification.

Nice To Haves

Experience as an ISSM.

Responsibilities

Conduct security assessments on DoD cloud environments using RMF.
Assist in providing guidance on policies and procedures to ensure compliance within an accreditation boundary.
Implement security strategies to control and manage organizational information risks.
Assess information systems to determine risk exposure.
Develop documentation addressing system security requirements and supporting accreditation efforts.
Enhance information security education within the organization and team.
Monitor the latest security technologies to keep project personnel informed.
Implement and maintain security controls and maintain compliance with security requirements.