Information Security Risk Specialist

EEOC

Information Security Risk Specialist supporting risk management and authorization activities at Booz Allen Hamilton. Partnering with engineering teams to ensure systems remain secure and compliant.

Posted 5/28/2026full-timeBethesda • Maryland, Virginia • 🇺🇸 United StatesMid-LevelSenior💰 $62,000 - $141,000 per yearWebsite

About the role

Key responsibilities & impact

turn complex risk into clear action by supporting Risk Management Framework (RMF) activities and driving Assessment & Authorization (A & A) packages through Authorization to Operate (ATO)
partner with engineering and mission teams to scope controls, assess risk, remediate gaps, and sustain continuous monitoring so systems remain secure and compliant

Requirements

What you’ll need

3+ years of experience within Information Security, Cyber Risk Management, or Security Compliance Functions
Experience applying NIST Risk Management Framework (RMF) across categorization, control selection or implementation, assessment, authorization, and continuous monitoring
Experience supporting Assessment & Authorization (A & A) efforts and coordinating Authority to Operate (ATO) decisions with Authorizing Officials
Experience performing security control assessments and producing artifacts such as Security Assessment Reports (SAR) and Plans of Action & Milestones (POA & Ms)
Experience developing and maintaining security documentation, including System Security Plans (SSP) and control implementation statements
Knowledge of NIST SP 800‑53 Rev. 5 control families and tailoring controls to impact levels
Knowledge of FISMA processes supporting RMF and authorization decisions
Ability to translate technical findings into risk statements and remediation recommendations aligned to mission and business priorities, plan and execute continuous monitoring (ConMon), track residual risk, and drive closure of POA & Ms
Public Trust
Bachelor’s degree

Benefits

Comp & perks

health, life, disability, financial, and retirement benefits
paid leave
professional development
tuition assistance
work-life programs
dependent care
recognition awards program

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Information SecurityCyber Risk ManagementSecurity ComplianceNIST Risk Management Framework (RMF)Assessment & Authorization (A & A)Authority to Operate (ATO)Security control assessmentsSecurity Assessment Reports (SAR)Plans of Action & Milestones (POA & Ms)System Security Plans (SSP)

Soft Skills

communicationcollaborationrisk assessmentproblem-solvingdocumentation

Certifications

Public Trust