Lead ISSO – DoD RMF & eMASS Expert

Booz Allen Hamilton; McLean (VA); On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Systems Security Officer, Lead, to guide policy-driven cyber risk assessments for the Department of War's IT infrastructure. You will lead RMF-driven analyses, coordinate with engineers to secure systems, and help the client understand acceptable risk while enhancing threat posture.

The role requires hands-on ISSO experience, DoD 8570 IAM III certification, a US Secret clearance, and the ability to navigate evolving security environments in a

Qualifications

• Experience developing Risk Management products and working through system accreditations
• Experience as an ISSO
• Experience interfacing with information assurance managers, including reviewing SSPs, risk assessment reports, accreditation packages, and POA&Ms
• Experience shepherding IT systems through the DoW RMF process
• Experience with eMASS
• Secret clearance
• HS diploma or GED
• DoD 8570 IAM Level III Certification

Responsibilities

• Lead assessment of the Department of War's IT infrastructure against current cyber policies, including RMF
• Identify areas of improvement and work with engineers to secure IT infrastructure
• Guide client through understanding acceptable risk and availability to improve threat posture
• Ensure the client operates securely in an evolving IT environment

Skills

Risk Management

ISSO

IA Managers

RMF

eMASS

Secret clearance

HS diploma

DoD 8570 IAM III

Education

HS diploma or GED

Tools

Remedy

ACAS

Job description

Booz Allen Hamilton is seeking an Information Systems Security Officer, Lead, to guide policy-driven cyber risk assessments for the Department of War's IT infrastructure. You will lead RMF-driven analyses, coordinate with engineers to secure systems, and help the client understand acceptable risk while enhancing threat posture.

The role requires hands-on ISSO experience, DoD 8570 IAM III certification, a US Secret clearance, and the ability to navigate evolving security environments in a