ISSO: Strategic Cybersecurity & Compliance (TS/SCI)

Booz Allen Hamilton; Chantilly (VA); On-site; USD 78,000 - 176,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information System Security Officer (ISSO) to assess and request customer authorization for classified endpoints, servers, networks, and security appliances in line with evolving U.S. Government cybersecurity guidance.

The ISSO will ensure auditing, vulnerability management, and configuration controls, while documenting compliance criteria and test cases under NIST, the IC, and DoD standards. TS/SCI with polygraph is required.

Qualifications

• Experience applying security concepts to information systems.
• Knowledge of RMF and performing system assessment and authorization through a Governance, Risk, and Compliance (GRC) tool.
• Knowledge of risk mitigation and selecting and designing security controls for implementation.
• Knowledge of incident response and data loss prevention, detection, and response.
• Knowledge of NIST and FISMA requirements for monitoring and reporting.
• TS/SCI clearance with a polygraph.
• HS diploma or GED.
• DoD 8570 IAM Level II Certification.

Responsibilities

• Assessing and requesting customer authorization for company-managed classified endpoints, servers, networks, and security appliances.
• Auditing system, network, and security configurations per policy and assessment documentation.
• Monitoring security procedures and ensuring program admins follow required controls.
• Documenting compliance criteria and test cases to validate evolving cybersecurity requirements.

Skills

Security concepts

RMF knowledge

GRC tooling

Risk mitigation

Incident response

NIST/FISMA knowledge

Clearance TS/SCI w/ polygraph

Education

HS diploma or GED

DoD 8570 IAM Level II

Tools

GRC tool

Job description

Booz Allen Hamilton is seeking an Information System Security Officer (ISSO) to assess and request customer authorization for classified endpoints, servers, networks, and security appliances in line with evolving U.S. Government cybersecurity guidance.

The ISSO will ensure auditing, vulnerability management, and configuration controls, while documenting compliance criteria and test cases under NIST, the IC, and DoD standards. TS/SCI with polygraph is required.