Cyber Risk Accreditation Specialist

About the Role

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming. As an information security risk specialist on our team, you’ll use your experience to work with commands supporting Naval operations to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You’ll review technical and personnel details from technical and cybersecurity SMEs to assess the entire threat landscape, then guide your client through a plan of action with presentations, white papers, and milestones. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity for cloud systems, large data and HPC environments, and scientific data systems.

Responsibilities

• Manage the lifecycle of RMF accreditation packages from initial accreditation or full re-accreditation through satisfactory reception of Authority-to-Operate (ATO) and follow-on ATO maintenance via continuous monitoring.
• Review and assess compliance with NIST Revision 5 security controls.
• Utilize and evaluate reporting from system security evaluations and scans based on ACAS automated scans and manual/automated STIG evaluations.
• Generate and manage security control evaluations, control family policy documentation, and security documents/artifacts within the Enterprise Mission Assurance Support Service (eMASS) system.
• Translate security concepts for clients to help them make informed decisions to secure operational data and supporting systems.

Requirements

• 5+ years of experience supporting DoD RMF accreditation efforts for enterprise IT systems.
• Experience managing the lifecycle of RMF accreditation packages.
• Experience reviewing and assessing compliance with NIST Revision 5 security controls.
• Experience utilizing and evaluating reporting from ACAS automated scans and manual/automated STIG evaluations.
• Experience generating and managing security control evaluations and documentation in eMASS.
• Secret clearance.
• HS diploma or GED.
• DoD Intermediate ISSM CWF Certification such as CompTIA Security+ CE Certification or Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.

Preferred Qualifications

• Experience with Department of Navy processes for DoD RMF Accreditation.
• Knowledge of assessing and documenting DoD Zero Trust Compliance requirements.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
• Recognition awards program for exceptional performance and superior demonstration of company values.

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Pay

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). Salary is determined by various factors, including location, education, knowledge, skills, competencies, experience, contract-specific affordability, and organizational requirements.

Schedule

This role may be remote, hybrid, or onsite:

• Remote: Primarily virtual, with occasional in-person requirements at a Booz Allen or customer facility.
• Hybrid: Frequent work from a Booz Allen facility, with potential visits to customer facilities as needed.
• Onsite: Work primarily performed at a Booz Allen office or customer facility, collaborating directly with colleagues and customers.

For virtual and hybrid roles, employees are generally expected to have their cameras on during meetings to support engagement and effective communication.

Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information. Secret clearance is required.