Mission-Driven Info Security Risk Specialist

Booz Allen Hamilton; Maryland; On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Security Risk Specialist to support DoD RMF activities across the lifecycle, developing authorization artifacts and POA&M management. You will gather details, interpret policies, and help produce SAPs, SARs, and RMF artifacts to secure DoD information systems.

In this role you’ll work with military leaders to translate security concepts into actionable plans, deliver presentations and whitepapers, and advance risk reduction in a structured, compliant

Qualifications

• 5+ years of experience executing DoD RMF activities across the RMF lifecycle.
• 3+ years with Department of the Navy RMF, including Navy RMF processes.
• Experience supporting DoD system authorization and ATO activities.
• Experience using eMASS and ACAS in a DoD environment and tracking vulnerabilities.
• Experience developing RMF artifacts, SAPs, SARs, and authorization packages.

Responsibilities

• Assist military leaders with identifying cyber risks and developing mitigation plans.
• Gather technical and personnel details from SMEs to support threat assessments.
• Develop action plans with presentations, whitepapers, and milestones.
• Translate security concepts for clear decision-making by leadership.
• Support DoD RMF artifacts, control assessments, and authorization packages.

Skills

RMF lifecycle

DoD RMF experience

STIGs knowledge

PPSM

Policy interpretation

Stakeholder communication

Education

Bachelor's degree in Cybersecurity, IT, CS, IS, Data Science, or SWE

Tools

eMASS

ACAS

STIG Viewer

Job description

Booz Allen Hamilton is seeking an Information Security Risk Specialist to support DoD RMF activities across the lifecycle, developing authorization artifacts and POA&M management. You will gather details, interpret policies, and help produce SAPs, SARs, and RMF artifacts to secure DoD information systems.

In this role you’ll work with military leaders to translate security concepts into actionable plans, deliver presentations and whitepapers, and advance risk reduction in a structured, compliant