Senior ISSO — Cybersecurity Risk & RMF Champion

Booz Allen; Chicago (IL); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen in Chicago seeks an Information Systems Security Officer to lead risk assessments, RMF packaging, and vulnerability management across large-scale systems. You will map STIGs, create POA&Ms, and advise leadership on mitigation strategies while coordinating with engineering teams.

The role requires 5+ years in information security, ISSO experience, and a Secret clearance. Knowledge of ACAS/HBSS, eMASS, and MDE is highly valued.

Qualifications

• 5+ years in information assurance or cybersecurity.
• Experience as an Information Systems Security Officer (ISSO).
• Experience managing ACAS and HBSS.
• Experience using eMASS for controls and artifacts.
• Experience supporting system security and authorization processes.
• Ability to review vulnerability documentation and write residual risk statements.
• Experience reporting IT security events or incidents.
• Knowledge of Microsoft Defender for Endpoint (MDE).
• Secret clearance.
• HS diploma or GED.

Responsibilities

• Perform risk assessments of systems and equipment and develop RMF packages.
• Create and map STIGs, POA&M, and RMF documentation.
• Brief leadership on security posture and present vulnerability summaries.
• Implement cybersecurity controls and vulnerability detection in large enterprises.
• Leverage big data analytics to identify threats.

Skills

ISSO experience

ACAS/HBSS

eMASS

Vulnerability assessment

Risk assessment

Vulnerability reporting

MDE

Clearance: Secret

Security policy understanding

Education

HS diploma or GED

Bachelor's degree in IT

Tools

Tenable Nessus

SecurityCenter

IBM Guardium

HP WebInspect

Network Mapper

Job description

Booz Allen in Chicago seeks an Information Systems Security Officer to lead risk assessments, RMF packaging, and vulnerability management across large-scale systems. You will map STIGs, create POA&Ms, and advise leadership on mitigation strategies while coordinating with engineering teams.

The role requires 5+ years in information security, ISSO experience, and a Secret clearance. Knowledge of ACAS/HBSS, eMASS, and MDE is highly valued.