Information Security Officer & Risk Management Lead (Remote)

Talentify; Hampton (VA); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information System Security Officer to collaborate with system owners, engineers, and stakeholders to implement security controls that reduce risk and ensure compliance with RMF and NIST 800-53.

You will translate security concepts for clients, help develop mitigation plans, and guide teams through A&A and continuous monitoring to safeguard mission-critical systems for government clients.

Qualifications

• Experience as an information system security officer.
• Experience ensuring consistency in processes, tools, and documentation.
• Experience using mandated cybersecurity tools and repositories.
• Knowledge of Risk Management Framework and NIST 800-53.
• Ability to perform RMF activities in accordance with federal mandates, NIST guidance, and agency policies and procedures.
• Ability to articulate security requirements and concerns to a variety of stakeholders.
• Ability to support Assessment and Authorization (A&A).
• Ability to maintain continuous monitoring and security posture awareness.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
• HS diploma or GED.

Responsibilities

• Collaborate with system owners, engineers, and stakeholders to implement security controls.
• Assess threats and develop mitigation plans.
• Translate security concepts for clients to aid decision-making.
• Guide teams through the Plan of Action and Milestones for risk reduction.

Skills

Information security

RMF/NIST 800-53

A&A support

Continuous monitoring

Stakeholder communication

Education

HS diploma or GED

Bachelor's degree

Job description

Booz Allen Hamilton is seeking an Information System Security Officer to collaborate with system owners, engineers, and stakeholders to implement security controls that reduce risk and ensure compliance with RMF and NIST 800-53.

You will translate security concepts for clients, help develop mitigation plans, and guide teams through A&A and continuous monitoring to safeguard mission-critical systems for government clients.