B

Booz Allen

Builds AI and cyber systems for the US government

Information Systems Security Manager

Full-TimeUpdated on 10/23/2026Deadline 1/6/27
$86.9k - $198k/yr
Senior
Bachelor's, Master's
Honolulu, HI, USA
In Person
CybersecuritySecurity Governance, Risk & Compliance
No H1B Sponsorship
US Top Secret Clearance Required

About the job

Requirements
  • At least 6 years of experience in cybersecurity compliance, information assurance, or IT security operations.
  • Experience serving as an Information Systems Security Manager, Information Systems Security Officer, or Risk Management Framework authorization role on Department of Defense or Department of War systems.
  • Experience managing Risk Management Framework Steps 1–6, from Categorize through Authorize, and Step 7, Continuous Monitoring.
  • Experience with eMASS, including authorization package development, control implementation statements, Plan of Action and Milestones management, and artifact and evidence management.
  • Experience supervising or mentoring Information Systems Security Officers or junior compliance staff.
  • Experience preparing systems for and supporting compliance audits, inspections, or assessments.
  • Ability to communicate security risk and compliance status to senior leaders, Authorizing Officials, and Security Control Assessors.
  • Top Secret/Sensitive Compartmented Information clearance is required.
  • Bachelor's degree is required.
  • DoD 8570 or 8140 IAM Level III certification is required.
Responsibilities
  • Own oversight as the principal cybersecurity authority for one or more system authorization packages throughout their lifecycle.
  • Manage the Risk Management Framework process end-to-end, including system categorization, control selection and tailoring, assessment and authorization activities, and continuous monitoring after Authority to Operate.
  • Supervise a team of Information Systems Security Officers, assign control families, review their work, and consolidate it into authoritative packages in eMASS.
  • Coordinate with Authorizing Officials, Authorizing Official Designated Representatives, Security Control Assessors, and program leadership to resolve findings, manage Plans of Action and Milestones, and drive authorization packages to completion on schedule.
  • Set standards for documentation and artifact management.
  • Train and mentor Information Systems Security Officers.
  • Represent the security posture of the systems to senior stakeholders.
Desired Qualifications
  • Experience with defense or national security issues in a specific theater or combatant command environment.
  • Experience working at a Department of Defense or Department of War Command-level Headquarters.
  • Experience with CNSSI 1253, NIST SP 800-53B, and DoD-specific overlays.
  • Experience developing internal standard operating procedures, naming conventions, or governance frameworks for artifact and control management.
  • Experience with system boundary changes, categorization changes, or reauthorization packages.
  • Experience hiring, interviewing, or building out a compliance team.
  • Knowledge of cloud-hosted DoD systems, such as AWS, Azure, or GCP.
  • Master's degree.

About the company

Booz Allen builds and runs technology for the U.S. government, mostly for the military and intelligence agencies, and its engineers work alongside consultants who know each agency's mission. In 1958, it helped the U.S. Navy create PERT, a project-scheduling method first used on the Polaris submarine missile program and later adopted across government and industry. Its teams design cyber defenses, AI and data tools, and battlefield communications, and it sells its own products, such as Vellox, a suite of AI tools that spot and fight off hackers. Agencies pay mainly through multi-year contracts that reimburse costs, bill hours, or set a fixed price. Booz Allen was founded in 1914 and is based in McLean, Virginia.

Company Size

11-50

Company Stage

IPO

Headquarters

New York City, New York

Founded

1914

Get referred to Booz Allen

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Product work is growing: Booz Allen bought Ultra's battlefield encryption and computing unit for $720 million in August 2026.
  • Hiring continues despite cuts: Booz Allen listed 2,282 open roles in October 2026, 1,097 of them in technology.
  • Work is lined up for years: backlog, including contract options, hit $39.5 billion in June 2026, about 3.5 years' revenue.

What critics are saying

  • Job security has slipped: staff fell from 33,400 to 30,900 in the year to June 2026 as civil work shrank.
  • Stock grants lost value: shares fell 29% in the year to October 2026 while defense IT rival CACI rose 14%.
  • Shutdowns halt paid work: the federal shutdown that began October 2025 cost Booz Allen about $50 million in unperformed work.

What makes Booz Allen unique

  • Most coworkers are cleared for secrets: about 77% of Booz Allen's 31,500 employees held security clearances in March 2026.
  • AI is its specialty: Booz Allen calls itself the federal government's largest AI provider, with about 400 active AI projects.
  • It bankrolls defense tech startups: Booz Allen tripled its venture fund to $300 million in July 2025, backing 17 companies.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Life Insurance
  • Disability Insurance
  • 401(k) Retirement Plan
  • Paid Vacation
  • Professional Development Budget
  • Remote Work Options
  • Flexible Work Hours

Company News

PR Newswire
Oct 9th, 2026
PDW integrates Booz Allen mission autonomy software on AM drones with secure fleet updates

Performance Drone Works announced it is integrating Booz Allen's mission autonomy software, powered by Shield AI's Hivemind, onto its AM drones. The software enables autonomy-assisted missions whilst operators retain decision-making authority. PDW is also deploying Booz Allen's secure over-the-air fleet update system across its aircraft portfolio. The combined product entered testing on 30 September and is planned for general availability in Q1 2027. PDW aims to extend the autonomy software to its C100 aircraft later in 2027. The integration supports PDW's strategy to rapidly field and adapt systems. The company's Huntsville facility has annual production capacity of 100,000 drones. Booz Allen's update system is designed to reduce approved update cycles from weeks to hours, even in contested environments.

Tectonic
Oct 5th, 2026
Aventra raises $17.5M for high-altitude balloon-dropped glide bombs

Virginia-based startup Aventra has raised $17.5 million in new funding, with Konvoy Ventures leading the round. Seed round backer Lavrock Ventures participated alongside new investors Booz Allen Ventures, Sands Capital, Langford Industries, and Western Alliance Bank. The company manufactures Piranha, a high-altitude balloon-dropped glide bomb that converts unguided munitions into precision-guided weapons. Since emerging from stealth with a $3.5 million seed round last October, Aventra has delivered over 400 units to US and NATO customers and doubled its production revenue. The system launches munitions from 60,000 feet and can glide approximately 100 miles, with recent demonstrations achieving accuracy within three metres of targets. Aventra plans to use the funding to scale production from 35 units monthly to 500 through a new Virginia facility called Factory Zero.

Yahoo Finance
Sep 14th, 2026
Palantir, Nvidia, Booz Allen restrict Anthropic and OpenAI models over data retention concerns

Palantir Technologies, Nvidia, and Booz Allen Hamilton are restricting use of AI models from Anthropic and OpenAI over data protection concerns, Reuters reported. The companies worry model providers could retain or extract value from sensitive corporate information. Palantir has pressed Anthropic for zero data retention guarantees. Nvidia limits Anthropic's models to less sensitive tasks, favouring its own Nemotron models for proprietary work. Booz Allen has banned staff from using Anthropic's commercial model on cybersecurity projects involving proprietary data. The pushback intensified after Anthropic introduced a 30-day data retention policy in June for its Claude 3.5 model, citing security monitoring needs. Anthropic responded by launching Enterprise Frontier Safeguards, allowing customers to store activity data in their own cloud infrastructure under their encryption keys.

Business Wire
Sep 12th, 2026
Credo AI Announces $21 Million in New Capital, Grows Leadership Team to Match the Rapid Pace of AI Innovation, Emerges as the Standard of Responsible AI Governance

Credo AI, a global leader in AI governance software, today announced that it has raised $21 million in new capital from CrimsoNox Capital, Mozilla Ventures, ...

TechCrunch
Sep 2nd, 2026
HiddenLayer nabs $100M as enterprises rush to secure their AI deployments | TechCrunch

Security companies are scrambling to build products that can monitor not just agents but also the tools and add-ons they use.