Risk Assessment Analyst

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to the global enterprise. In all of this “cyber noise,” we help organizations understand their risks and how to mitigate them. As an information security risk specialist on our team, you’ll work with industry partners to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You’ll gather technical and personnel details from subject-matter experts and engineers to assess the entire threat landscape, then help guide your client through a plan of action with presentations, white papers, and milestones. You’ll translate security concepts for your client so they can make the best decisions to secure their critical infrastructure. This role offers the opportunity to take an active role in information security while growing your skills in cybersecurity policy and implementation.

Responsibilities

• Work with industry partners to identify cyber risks, understand applicable policies, and develop mitigation plans
• Collaborate with subject-matter experts and engineers to assess the threat landscape
• Guide clients through action plans using presentations, white papers, and milestones
• Translate complex security concepts for clients to support decision-making for critical infrastructure protection

Requirements

• 5+ years of experience with services for the Federal government or Federal advising within a professional work environment
• Experience in cybersecurity risk assessments and supply chain or risk management efforts
• Experience leveraging collaboration forums, such as MS Teams and SharePoint, for knowledge management and team delivery
• Experience writing or drafting executive or formal senior-level correspondence or material, such as memorandums or white papers, to support decision-making
• Top Secret clearance
• Bachelor's degree in Computer Science, Information Systems, Engineering, Mathematics, or Physics

Preferred Qualifications

• Experience facilitating meetings, such as working groups or conferences, including pre- and post-meeting activities
• Experience supporting DoD-level organizations, including Action Officer duties, coordination, and staffing processes or tools
• Knowledge of NIST 800 series publications
• Knowledge of Joint instructions and manuals
• Knowledge of DoD policy around non-traditional IT cybersecurity, including ICT-SCRM and C-SCRM
• Ability to lead cross-functional initiatives where goals and parameters may evolve over time
• Ability to brief and collaborate with executive and senior leadership
• Strong verbal and written communication, organizational, problem-solving, and interpersonal skills

Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information.

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care
• Recognition awards program for exceptional performance and superior demonstration of company values

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet this threshold are eligible for select offerings, excluding health benefits.

Pay

Salary is determined by various factors, including location, education, knowledge, skills, competencies, experience, contract-specific affordability, and organizational requirements. The projected compensation range for this position is $62,000.00 to $141,000.00 (annualized USD).

Schedule

This role may be remote, hybrid, or onsite:

• Remote: Primarily virtual, with occasional in-person work at a Booz Allen or customer facility.
• Hybrid: Frequent work from a Booz Allen facility, with expectations set by leadership and role needs. May require visits to customer facilities.
• Onsite: Work primarily performed at a Booz Allen office or customer facility, collaborating directly with colleagues and customers.

Employees working virtually are generally expected to have their cameras on during meetings to support engagement and effective communication.