Information Security Risk Specialist

Booz Allen Hamilton•USA, OK, Tinker AFB (3001 Staff Dr), OK

1d•$99,000 - $225,000•Remote

About The Position

The Information Security Risk Specialist will analyze policies, procedures, and requirements to determine cyber resilience for the nation's airborne networks. This role involves reviewing systems to identify potential security weaknesses, recommending improvements, implementing changes, and documenting modifications. The specialist will assess the threat landscape by reviewing technical, environmental, and personnel details from subject matter experts, engineers, and program managers. They will collaborate with the program manager to translate security concepts, enabling informed decisions for securing mission-critical systems. The role also involves guiding clients through understanding acceptable risk and availability, advancing the development of a strategic cyber roadmap, and ensuring secure operations in an evolving environment. The specialist will identify the right mix of tools and techniques to translate customer cybersecurity needs into secure and effective solutions, advising on new techniques and guiding the team through critical design approaches, providing alternatives and customizing solutions to balance security and operational needs.

Requirements

5+ years of experience with cybersecurity
Experience providing configuration management (CM) for information system security software, hardware, and firmware, and coordinating changes and modifications with the Security Control Assessor (SCA) and Authorizing Official (AO)
Experience providing security guidance and IS validation using National Institute of Standards and Technology (NIST) RMF, DoD, and local security policies
Ability to manage security authorization activities
Ability to coordinate security requirements for connected and non-connected systems and unclassified and classified systems
Secret clearance
HS diploma or GED
IAT Level II Certification including Security+ Certification

Nice To Haves

7+ years of experience with cybersecurity
Top Secret clearance
Bachelor's degree
DoD IAM or IAT Level III Certification
Certified Information Systems Security Professional (CISSP) Certification

Responsibilities

Review systems to identify potential security weaknesses and recommend improvements to mitigate risk.
Implement changes and document modifications.
Review technical, environmental, and personnel details from subject matter experts, engineers, and program managers to assess the entire threat landscape.
Work closely with the program manager to translate security concepts enabling them to make informed decisions to secure their mission critical systems.
Guide clients through understanding acceptable risk and availability.
Advance the development of a strategic cyber roadmap.
Ensure the client operates securely as they navigate an evolving environment.
Identify the right mix of tools and techniques to translate customer cybersecurity needs and goals into a plan that will enable secure and effective solutions.
Advise on new techniques and guide the team through critical approaches to design, providing alternatives and customizing solutions to maintain a balance of security and operational needs.
Provide configuration management (CM) for information system security software, hardware, and firmware.
Coordinate changes and modifications with the Security Control Assessor (SCA) and Authorizing Official (AO).
Provide security guidance and IS validation using National Institute of Standards and Technology (NIST) RMF, DoD, and local security policies.
Manage security authorization activities.
Coordinate security requirements for connected and non-connected systems and unclassified and classified systems.