Remote ISSO — Information Security Officer & RMF Lead

Booz Allen Hamilton; Columbus (OH); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Systems Security Officer to lead risk assessments, manage security controls, and drive RMF accreditation activities across enterprise systems. You will create STIGs, POA&Ms, and RMF documentation while coordinating with engineers and leadership to clearly communicate risk and mitigation strategies.

The role requires 5+ years in information assurance/cybersecurity, ISSO experience, and proficiency with ACAS/HBSS/eMASS.

Qualifications

• Minimum 5+ years of information assurance or cybersecurity experience.
• Experience serving as an Information Systems Security Officer (ISSO).
• Experience with ACAS and HBSS administration.
• Experience using eMASS to address security controls and upload artifacts such as STIG checklists or ACAS scans.
• Experience supporting system security and authorization processes.
• Experience reviewing vulnerability documentation and writing residual risk statements.
• Experience reporting IT security events or incidents based on policies and procedures.
• Knowledge of Microsoft Defender for Endpoint (MDE).
• Secret clearance.
• HS diploma or GED.

Responsibilities

• Perform risk assessments of systems and equipment.
• Assist engineers with identifying solutions for vulnerabilities and create STIGs.
• Submit change requests and develop a Plan of Action and Milestones (POA&M).
• Create documentation supporting RMF accreditations and RMF packages.
• Brief security posture to client leadership; prepare slides and summaries of vulnerabilities.

Skills

Information assurance

Cybersecurity

ISSO experience

ACAS

HBSS

eMASS

RMF

MDE

IT security events

Education

Bachelor's degree in IT

HS diploma or GED

Tools

Tenable Nessus

SecurityCenter

IBM Guardium

HP WebInspect

Network Mapper

Job description

Booz Allen Hamilton is seeking an Information Systems Security Officer to lead risk assessments, manage security controls, and drive RMF accreditation activities across enterprise systems. You will create STIGs, POA&Ms, and RMF documentation while coordinating with engineers and leadership to clearly communicate risk and mitigation strategies.

The role requires 5+ years in information assurance/cybersecurity, ISSO experience, and proficiency with ACAS/HBSS/eMASS.