ISSO: Cybersecurity & RMF Risk Leader

Booz Allen Hamilton; Oklahoma City (OK); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an experienced information security professional to join a team of engineers supporting security operations across programs. The role focuses on risk assessments, RMF artifacts, STIG mapping, and vulnerability management with ACAS/HBSS, eMASS, and MDE integration.

You will communicate technical findings to senior leadership and drive improvements in cybersecurity controls. Applicants should have 5+ years in information assurance or cybersecurity, a current security

Qualifications

• 5+ years of experience in information assurance or cybersecurity.
• Experience serving as an Information Systems Security Officer (ISSO).
• Experience managing ACAS and HBSS, and using eMASS to address controls and upload artifacts.

Responsibilities

• Perform risk assessments of systems and equipment.
• Create and map STIGs; submit POA&Ms; support RMF accreditations.
• Brief security posture to client leadership and prepare vulnerability summaries.
• Develop relationships with teams and communicate security concepts to diverse audiences.
• Implement security controls and threat detection improvements in large enterprises.

Skills

Information assurance

Cybersecurity

ISSO

ACAS

HBSS

eMASS

RMF

Vulnerability management

Security controls

Secret clearance

Education

HS diploma or GED

Bachelor's degree in IT

Tools

Tenable Nessus

SecurityCenter

IBM Guardium

HP WebInspect

Network Mapper

ACAS

HBSS

Job description

Booz Allen Hamilton is seeking an experienced information security professional to join a team of engineers supporting security operations across programs. The role focuses on risk assessments, RMF artifacts, STIG mapping, and vulnerability management with ACAS/HBSS, eMASS, and MDE integration.

You will communicate technical findings to senior leadership and drive improvements in cybersecurity controls. Applicants should have 5+ years in information assurance or cybersecurity, a current security