Cybersecurity & Risk Management Framework Specialist

About the role

Manage the application of analytical risk management principles that enable organizations to achieve mission assurance by preparing for, preventing, mitigating, responding to, and recovering from emergencies. Apply advanced skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction. Mentor and supervise team members. Support enterprise cybersecurity governance, risk management, compliance, and innovation activities for Department of War (DoW) information systems and networks. Assume responsibility for developing cybersecurity strategies, managing the Risk Management Framework (RMF) process, ensuring regulatory compliance, and supporting mission partners with cybersecurity risk mitigation and emerging threat awareness. Work across multiple cybersecurity functions, including Governance, RMF operations, compliance monitoring, and cyber threat innovation initiatives.

Responsibilities

• Manage the application of analytical risk management principles that enable organizations to achieve mission assurance by preparing for, preventing, mitigating, responding to, and recovering from emergencies.
• Apply advanced skills, extensive technical expertise, and full industry knowledge.
• Develop innovative solutions to complex problems.
• Work without considerable direction.
• Mentor and supervise team members.
• Support enterprise cybersecurity governance, risk management, compliance, and innovation activities for Department of War (DoW) information systems and networks.
• Assume responsibility for developing cybersecurity strategies, managing the Risk Management Framework (RMF) process, ensuring regulatory compliance, and supporting mission partners with cybersecurity risk mitigation and emerging threat awareness.
• Work across multiple cybersecurity functions, including Governance, RMF operations, compliance monitoring, and cyber threat innovation initiatives.

Requirements

• 5+ years of experience with IT operations or cybersecurity
• Experience in a cybersecurity compliance, operations, or engineering leadership role
• Experience supporting cybersecurity compliance, audits, or inspections
• Ability to work with and guide senior leaders, including CISO, CIO, and CTO, and executives to ideate, build, and execute cybersecurity capability maturation
• Ability to collaborate with project and proposal teams to incorporate cybersecurity solutions and develop high quality implementation plans and roadmaps
• Ability to author technical documentation, white papers, and blogs on leading cybersecurity topics and concepts
• T/S/SCI clearance
• HS diploma or GED
• Information Security Certification, including CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification

Qualifications

• Nice if you have:
• Experience working on defense or national security issues in the Indo-Pacific region
• Experience working at DoW Command-level Headquarters
• Experience with NIST 800-53 and DoD 8500/8510
• Experience selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations
• Knowledge of the Enterprise Mission Assurance Support Service (eMASS) and Mission Partner Engagement (MPE)
• Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data
• Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)
• Possession of excellent verbal and written communication skills
• Bachelor's degree

Skills

• Experience working on defense or national security issues in the Indo-Pacific region
• Experience working at DoW Command-level Headquarters
• Experience with NIST 800-53 and DoD 8500/8510
• Experience selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations
• Knowledge of the Enterprise Mission Assurance Support Service (eMASS) and Mission Partner Engagement (MPE)
• Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data
• Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)
• Possession of excellent verbal and written communication skills

Benefits

• Health
• Life
• Disability
• Financial
• Retirement
• Paid Leave
• Professional Development
• Tuition Assistance
• Work-Life Programs
• Dependent Care

Pay

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).

Schedule

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.