Information System Security Officer

Booz Allen Hamilton•Houston, TX

2d•Remote

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government officials. In all of this “cyber noise”, how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action. As an information system security officer on our team, you’ll work with system owners, engineers, and stakeholders to ensure security controls are implemented to reduce risk. Discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from SMEs and engineers to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action. You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical systems. This is your opportunity to take an active role in information security while growing your skills in risk management. Work with us as we protect the aerospace industry. Join us. The world can’t wait.

Requirements

Experience as an information system security officer
Experience ensuring consistency in processes, tools, and documentation
Experience using mandated cybersecurity tools and repositories
Knowledge of Risk Management Framework and NIST 800-53
Knowledge of system environments
Ability to perform RMF activities in accordance with federal mandates, NIST guidance, and agency policies and procedures
Ability to articulate security requirements and concerns to a variety of stakeholders
Ability to support Assessment and Authorization (A&A)
Ability to maintain continuous monitoring and security posture awareness
HS diploma or GED

Nice To Haves

Possession of excellent communication and documentation skills
Bachelor's degree

Responsibilities

Work with system owners, engineers, and stakeholders to ensure security controls are implemented to reduce risk.
Discover cyber risks, understand policies, and develop a mitigation plan.
Get technical, environmental, and personnel details from SMEs and engineers to assess the entire threat landscape.
Help your team guide your client through a plan of action.
Translate security concepts for your client so they can make the best decisions to secure their mission-critical systems.
Take an active role in information security while growing your skills in risk management.
Support Assessment and Authorization (A&A).
Maintain continuous monitoring and security posture awareness.