Information Systems Security Officer, Lead

Booz Allen Hamilton•Laurel, MD

23h•Remote

About The Position

The Opportunity: When our country’s cybersecurity is on the line, simply reacting is not enough—we need a plan. And when that plan needs to support the Department of War's Information Technology infrastructure, we need strategic policy development. That’s why we need you, a cybersecurity specialist with the expertise required to analyze the policies that determine our cyber resilience. As an Information Systems Security Officer (ISSO) on our team, you’ll lead the assessment of the Department of War's IT infrastructure against current cyber policies, including RMF, and identify areas of improvement and work with engineers to secure the IT infrastructure using best practices, and industry standards. As you guide your client through understanding acceptable risk and availability, you’ll improve the client's threat posture. You’ll work to ensure the client operates securely as they navigate an evolving IT environment. Work with us as we secure our nation's critical infrastructure as an ISSO. Join us. The world can’t wait.

Requirements

Experience developing Risk Management products and working through system accreditations
Experience as an ISSO
Experience interfacing with information assurance managers, including reviewing documentation, including systems security plans (SSPs), risk assessment reports, accreditation packages, and Plan of Actions and Milestones (POA&Ms)
Experience shepherding IT systems through the DoW's RMF process
Experience with eMASS
Secret clearance
HS diploma or GED
DoD 8570 IAM Level III Certification

Nice To Haves

Experience with Remedy
Experience with ACAS

Responsibilities

Lead the assessment of the Department of War's IT infrastructure against current cyber policies, including RMF.
Identify areas of improvement.
Work with engineers to secure the IT infrastructure using best practices and industry standards.
Guide the client through understanding acceptable risk and availability.
Improve the client's threat posture.
Ensure the client operates securely as they navigate an evolving IT environment.