Information Security Risk Specialist

Booz Allen Hamilton•Usa, MD

20h

About The Position

As an Information Security Risk Specialist, you will play a crucial role in helping government agencies understand and mitigate complex cyber threats. You will assist military leaders in identifying cyber risks, ensuring compliance with applicable policies, and developing comprehensive mitigation plans. This involves gathering technical and personnel details from subject matter experts to assess the entire threat landscape. You will guide clients through action plans using presentations, white papers, and milestones, translating security concepts to enable informed decision-making for securing critical systems. This is an opportunity to gain experience in a strategic information security role and develop skills in cybersecurity while protecting our nation's cyber infrastructure.

Requirements

3+ years of experience leading and executing the Department of Defense (DoD) Risk Management Framework (RMF) for DoD information systems, including full lifecycle implementation across RMF steps, application of DoD and DoD Component cybersecurity policies, procedures, and directives, and development and management of Plans of Actions and Milestones (POA&M).
Experience supporting DoD system authorization and Authorization to Operate (ATO) activities.
Experience reviewing, interpreting, and enforcing Security Technical Implementation Guides (STIGs) using STIG Viewer.
Experience using eMASS and ACAS within a DoD environment, including analyzing and prioritizing vulnerability scan results, developing and maintaining hardware and software inventories, tracking vulnerabilities, and supporting remediation activities.
Experience developing and supporting Security Assessment Plans (SAPs), Security Assessment Reports (SARs), RMF artifacts, control assessments, and authorization packages in accordance with DoD RMF requirements.
Knowledge of Ports, Protocols, and Services Management (PPSM).
Ability to operate in a structured and compliance-driven environment while executing established cybersecurity processes with minimal supervision.
Secret clearance.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Science, or Software Engineering.
DoD 8140, 752- Cyber Policy and Strategy Planner, Intermediate Certification.

Nice To Haves

Top Secret clearance.
Master’s degree.

Responsibilities

Assist military leaders with discovering their cyber risks.
Understand applicable policies.
Develop a mitigation plan.
Gather technical and personnel details from subject matter experts to help with the assessment of the entire threat landscape.
Guide your client through a plan of action with presentations, white papers, and milestones.
Help to translate security concepts so they can make the best decisions to secure their critical systems.
Lead and execute the Department of Defense (DoD) Risk Management Framework (RMF) for DoD information systems, including full lifecycle implementation across RMF steps.
Apply DoD and DoD Component cybersecurity policies, procedures, and directives.
Develop and manage Plans of Actions and Milestones (POA&M).
Support DoD system authorization and Authorization to Operate (ATO) activities.
Review, interpret, and enforce Security Technical Implementation Guides (STIGs) using STIG Viewer.
Use eMASS and ACAS within a DoD environment, including analyzing and prioritizing vulnerability scan results, developing and maintaining hardware and software inventories, tracking vulnerabilities, and supporting remediation activities.
Develop and support Security Assessment Plans (SAPs), Security Assessment Reports (SARs), RMF artifacts, control assessments, and authorization packages in accordance with DoD RMF requirements.
Manage knowledge of Ports, Protocols, and Services Management (PPSM).
Operate in a structured and compliance-driven environment while executing established cybersecurity processes with minimal supervision.