Information Security Officer: Cyber Risk & RMF Expert

Booz Allen Hamilton; Huntsville (AL); On-site; USD 62,000 - 141,000; Full time

Benefits offered by this job

Health benefits

Professional development

Tuition assistance

Job summary

Booz Allen Hamilton is seeking an Information System Security Officer to support federal clients in identifying cyber risks, evaluating RMF policies, and delivering action plans through presentations and whitepapers. You will translate complex security concepts into practical guidance for stakeholders and help guide risk mitigation efforts.

The role emphasizes technical risk assessment, collaboration with SMEs, and producing milestones to strengthen mission-critical systems.

Qualifications

• Experience developing security plans/packages for A&A/ATO and implementing controls.
• Ability to document requirements in RMF systems and coordinate with teams.
• Ability to create tactics, procedures, whitepapers, workflows, and architecture diagrams.
• Ability to analyze RMF policies and communicate effectively.

Responsibilities

• Support federal clients to identify cyber risks and develop mitigation plans.
• Translate security concepts into actionable plans and presentations.
• Prepare whitepapers, SOPs, and workflow diagrams for risk treatment.

Skills

Security planning & A&A experience

RMF policy analysis

Threat modeling & risk mitigation

Communication & presentation skills

Education

HS diploma or GED + 10+ years cyber/info assurance

Bachelor's degree + 6+ years cyber/IA

Tools

Xacta

JCAM

Nessus

ACAS

STIGs/IAVA

Job description

Booz Allen Hamilton is seeking an Information System Security Officer to support federal clients in identifying cyber risks, evaluating RMF policies, and delivering action plans through presentations and whitepapers. You will translate complex security concepts into practical guidance for stakeholders and help guide risk mitigation efforts.

The role emphasizes technical risk assessment, collaboration with SMEs, and producing milestones to strengthen mission-critical systems.