InfoSec Risk & RMF Lead

Phase2 Technology; Huntsville (AL); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information System Security Officer to help federal clients identify cyber risks, understand policies, and develop mitigation plans. You will translate complex security concepts for client understanding and guide teams with presentations, whitepapers, and milestones to secure mission-critical systems.

You will work with SMEs to collect technical details, assess threat landscapes, and present action plans.

Qualifications

• Experience supporting the development of security plans or packages for Assessment and Authorization (A&A) of IT systems Authority to Operate (ATO), including the implementation and assessment of cybersecurity controls
• Ability to accurately relate requirements and document requirements within the RMF system and coordinate with program, other systems, and security personnel
• Ability to create tactics, techniques, procedures, whitepapers, standard operating procedures, workflows, system data flows, and architectural diagrams
• Ability to analyze RMF policies
• Possession of excellent interpersonal and presentation skills
• Possession of excellent verbal and written communication skills

Responsibilities

• Identify and assess cyber risks for federal clients and translate security concepts into actionable plans
• Develop and guide plans of action with presentations, whitepapers, and milestones
• Work with SMEs to gather technical details and translate them for clients' decision making

Skills

Top Secret clearance

RMF policies

Threat mitigation planning

Security documentation

Education

High school diploma or GED (IA/Cyber experience)

Bachelor's degree in related field (IA/Cyber)

Tools

Xacta

JCAM

Nessus/ACAS review

Job description

Booz Allen Hamilton is seeking an Information System Security Officer to help federal clients identify cyber risks, understand policies, and develop mitigation plans. You will translate complex security concepts for client understanding and guide teams with presentations, whitepapers, and milestones to secure mission-critical systems.

You will work with SMEs to collect technical details, assess threat landscapes, and present action plans.