Cybersecurity Risk Analyst

Booz Allen Hamilton supports professionals who help clients strengthen cybersecurity policy and manage risk across complex federal environments. In this onsite role in Washington, DC, you will contribute to strategic cyber policy development and risk analysis, helping clients navigate evolving IT and make informed decisions about acceptable risk.

Compensation: USD 69,400 to 158,000 per year.

What you will do

• Review your client’s current cyber policies, evaluate coverage across policy areas, and identify risk areas.
• Partner with the information security office to review risk acceptance requests and assess overall risk.
• Collaborate with information system stakeholders to develop clear risk acceptance justifications.
• Support client understanding of acceptable risk and availability as part of day-to-day risk decisions.
• Help develop and refine a strategic cyber roadmap aligned to the client’s risk posture.
• Support secure operations as clients work through change in an evolving IT environment.

What you need

• 2+ years of experience with NIST 800-53.
• Experience with cybersecurity risk analysis matters.
• Knowledge of cybersecurity strategy, governance, and policies within the federal space.
• Knowledge of cyber frameworks, including Risk Management Framework (RMF) and NIST Cybersecurity Framework (CSF).
• Knowledge of FISMA, NIST 800-37 RMF, FedRAMP, security control assessments, POA&M management, risk management, and continuous monitoring.
• Ability to perform data analysis and report findings.
• Public Trust.
• Bachelor’s degree.

Systems and frameworks you will use

• NIST 800-53
• Risk Management Framework (RMF)
• NIST Cybersecurity Framework (CSF)
• FISMA
• NIST 800-37 RMF
• FedRAMP
• POA&M management

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care
• Recognition awards program

Nice if you have

• Experience with RSA Archer
• Experience with policy documentation
• Experience conducting IT audits
• Excellent verbal and written communication skills, including developing engaging presentations
• Security+, CAP, CISSP, CISA, or CISM Certification

Vetting and identity verification

Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client. A Public Trust determination is required.

As part of the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments, and the company reserves the right to take your picture to verify your identity and prevent fraud.

AI usage policy

AI is part of daily work at Booz Allen, and the company is committed to responsible and ethical use of AI tools. The use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work model

Onsite: Work will primarily be performed full-time at a customer facility, where employees collaborate directly with colleagues and customers as required by the role.