Information System Security Controls Assessor

Booz Allen Hamilton•Herndon, VA

13d•Remote

About The Position

As an Information System Security Controls Assessor, you will use your experience to work with national security and intelligence community clients to discover their cyber risks, understand policies, and develop mitigation plans. You will review technical and environmental details to assess the entire threat landscape. Then, you will guide your client through a plan of action with presentations, white papers, and milestones. You will work with your client to translate security concepts, directives, and controls into action so they can make the best decisions to secure their mission-critical systems. This is your opportunity to act as an information security specialist while broadening your skills in leading-edge technologies in support of national security.

Requirements

6+ years of experience with IT and cybersecurity
Experience as a Security Control Assessor, ISSO, ISSE, or ISSM
Experience performing assessment and authorization activities for Intelligence Community or DoD customers
TS/SCI clearance with a polygraph
HS diploma or GED

Nice To Haves

6+ years of experience with IT and cybersecurity
Experience with control implementation, ICD 503, CNSS, and NIST requirements, processes, and controls
Experience with cyber defense and vulnerability assessment tools
Experience with operating systems, platforms, and technologies, including Windows, Linux, cloud, virtualization, or wireless
Knowledge of customer IT systems, requirements, and processes for information assurance, assessment, and authorization activities
Ability to work independently and as part of a team
Possession of excellent verbal and written communication skills
Bachelor's degree
Advanced Cybersecurity Certification, including Security+, GSEC, or CISSP Certification

Responsibilities

Discover cyber risks for national security and intelligence community clients.
Understand policies and develop mitigation plans.
Review technical and environmental details to assess the threat landscape.
Guide clients through a plan of action with presentations, white papers, and milestones.
Translate security concepts, directives, and controls into action for clients.
Secure mission-critical systems.