Cybersecurity and Risk Management Framework Specialist, Mid
About the role
Manage the application of analytical risk management principles that enable organizations to achieve mission assurance by preparing for, preventing, mitigating, responding to, and recovering from emergencies. Apply advanced skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction and mentor and supervise team members.
Support enterprise cybersecurity governance, risk management, compliance, and innovation activities for Department of War (DoW) information systems and networks. Assume responsibility for developing cybersecurity strategies, managing the Risk Management Framework (RMF) process, ensuring regulatory compliance, and supporting mission partners with cybersecurity risk mitigation and emerging threat awareness. Work across multiple cybersecurity functions, including governance, RMF operations, compliance monitoring, and cyber threat innovation initiatives.
Responsibilities
- Guide senior leaders, including CISO, CIO, and CTO, and executives to ideate, build, and execute cybersecurity capability maturation
- Collaborate with project and proposal teams to incorporate cybersecurity solutions and develop high-quality implementation plans and roadmaps
- Author technical documentation, whitepapers, and blogs on leading cybersecurity topics and concepts
Requirements
- 2+ years of experience with IT operations or cybersecurity
- Experience in a cybersecurity compliance, operations, or engineering leadership role
- Experience supporting cybersecurity compliance, audits, or inspections
- Ability to work with and guide senior leaders and executives
- TS/SCI clearance
- HS diploma or GED
- Information Security Certification such as CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification
Nice to have
- Experience working on defense or national security-related issues in the Indo-Pacific region
- Experience working at a DoW Command-level Headquarters
- Experience with NIST 800-53 and DoD 8500 or 8510
- Experience selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations
- Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)
- Knowledge of the Enterprise Mission Assurance Support Service (eMASS) and Mission Partner Engagement (MPE)
- Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data
- Ability to support the development of cybersecurity policies or governance frameworks
- Possession of excellent verbal and written communication skills
- Bachelor's degree
Benefits
Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs, including:
- Health, life, disability, financial, and retirement benefits
- Paid leave, professional development, tuition assistance, work-life programs, and dependent care
- Recognition awards program for exceptional performance and superior demonstration of company values
Pay
Salary is determined by various factors, including location, education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $55,200.00 to $126,000.00 (annualized USD).
Schedule
This position may be remote, hybrid, or onsite:
- Remote: Generally expected to have cameras on during meetings; may require occasional in-person work at a Booz Allen or customer facility.
- Hybrid: Expected to work from a Booz Allen facility frequently, with potential visits to customer facilities as needed.
- Onsite: Work primarily performed at a Booz Allen office or customer facility, collaborating directly with colleagues and customers.