B

Booz Allen

Builds AI and cyber systems for the US government

Information System Security Manager

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeWarren, MI, USA$86.9k - $198k /yrIn-person

About the Job

Requirements

  • At least 3 years of experience in cybersecurity, including support for Department of War or Army information systems.
  • Experience supporting Risk Management Framework assessments, compliance audits, and system authorization activities.
  • Experience working in a Special Access Program environment.
  • Experience as an Information System Security Manager.
  • Experience managing vulnerability assessments, remediation tracking, and cybersecurity compliance efforts.
  • Experience with Assured Compliance Assessment Solution, Nessus or Tenable Security Center, Security Technical Implementation Guide Viewer, and Evaluate STIG.
  • A Top Secret clearance is required.
  • A bachelor's degree in Cybersecurity, Information Technology, Computer Science, or Engineering is required.
  • CISSP certification is required.

Responsibilities

  • Serve as the Information System Security Manager for assigned systems and act as the principal advisor on system cybersecurity posture, security controls, and compliance.
  • Oversee implementation and sustainment of cybersecurity requirements across system lifecycles, including development, fielding, maintenance, and operational support.
  • Manage Risk Management Framework execution and system assessment and authorization activities, including review of Risk Management Framework artifacts, identification of control deficiencies, and coordination of corrective actions.
  • Establish and maintain cybersecurity program control processes for certification testing, compliance documentation, inspections, periodic audits, investigations, software research, hardware introduction, and release activities.
  • Review vulnerability assessments and compliance audit results, triage and prioritize findings, direct remediation efforts, and track closure of deficiencies.
  • Ensure systems are maintained in compliance with Risk Management Framework controls, enclave policy, local policy, and applicable cybersecurity requirements through configuration management, system hardening, and patch management oversight.
  • Coordinate with Information System Security Officers, Information System Security Engineers, administrators, program managers, and stakeholders to integrate security controls and resolve cybersecurity integration and verification issues.
  • Oversee use of enterprise cybersecurity and compliance tools, including Assured Compliance Assessment Solution, Nessus or Tenable Security Center, Security Technical Implementation Guide Viewer, and Evaluate STIG, to assess system posture and support audit readiness.
  • Maintain documentation, status reporting, and cybersecurity readiness metrics for leadership and authorizing stakeholders.

Desired Qualifications

  • Experience serving as an Information System Security Manager, Information System Security Officer, cybersecurity lead, or system security compliance manager in a Department of Defense environment.
  • Experience supporting Army programs, platform systems, or enclave environments.
  • Experience with system hardening, patch management, audit readiness, and continuous monitoring activities.
  • Experience briefing cybersecurity risks, findings, and recommendations to leadership.
  • Experience tailoring, implementing, and monitoring Joint Special Access Program Implementation Guide controls on Department of War information systems.
  • Ability to coordinate across technical and non-technical stakeholders.
  • Excellent written and verbal communication skills.
  • Possession of a Top Secret/Sensitive Compartmented Information clearance.

About the Company

Booz Allen

Builds AI and cyber systems for the US government

Booz Allen builds and runs technology for the U.S. government, mostly for the military and intelligence agencies, and its engineers work alongside consultants who know each agency's mission. In 1958, it helped the U.S. Navy create PERT, a project-scheduling method first used on the Polaris submarine missile program and later adopted across government and industry. Its teams design cyber defenses, AI and data tools, and battlefield communications, and it sells its own products, such as Vellox, a suite of AI tools that spot and fight off hackers. Agencies pay mainly through multi-year contracts that reimburse costs, bill hours, or set a fixed price. Booz Allen was founded in 1914 and is based in McLean, Virginia.

Company size
11-50
Company stage
IPO
Headquarters
McLean, VA
Founded
1914

Recently Posted Jobs

Explore more opportunities at Booz Allen

See more jobs