ISSO Mid – Remote Cyber Risk & Compliance Leader

Booz Allen; Ohio; On-site; USD 62,000 - 141,000; Full time

Benefits offered by this job

Health benefits

Life Insurance

Disability benefits

Retirement benefits

Tuition assistance

Paid leave

Work-life programs

Dependent care

Job summary

Booz Allen is seeking an Information Systems Security Officer (Mid) to translate complex cyber risks into actionable plans for our clients. You will collaborate with teams to develop mitigation strategies, assess threat landscapes, and communicate security concepts clearly for decision makers.

This role emphasizes DoD/NIST frameworks, agency requirements, and cloud security growth, with a focus on mission‑critical systems and risk management in a dynamic environment.

Qualifications

• 2+ years of experience as an ISSO or Information System Security Analyst (ISSA)
• Experience with DoD/ government security guidelines and requirements
• Experience with implementing security controls per NIST 800-53, RMF, FedRAMP
• Ability to perform risk analysis
• TS/SCI clearance
• HS diploma or GED
• DoD 8570 IAM Level II Certification (listed certifications)

Responsibilities

• Discover cyber risks for clients and develop a mitigation plan
• Translate security concepts for client decisions
• Provide presentations, whitepapers, and milestones to guide action
• Contribute to cloud security initiatives and growth

Skills

ISSO/ISSA experience

Risk analysis

Security policy understanding

Effective communication

Cloud technologies familiarity

Education

HS diploma or GED

DoD 8570 IAM Level II Certification (CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP)

Tools

STIG Viewer

SCAP

ACAS

Splunk

SAP

Job description

Booz Allen is seeking an Information Systems Security Officer (Mid) to translate complex cyber risks into actionable plans for our clients. You will collaborate with teams to develop mitigation strategies, assess threat landscapes, and communicate security concepts clearly for decision makers.

This role emphasizes DoD/NIST frameworks, agency requirements, and cloud security growth, with a focus on mission‑critical systems and risk management in a dynamic environment.