Enterprise Cybersecurity GRC Security Controls Assessor

Enterprise Cybersecurity GRC Security Controls Assessor at Booz Allen Hamilton, onsite in McLean, VA.

Responsibilities

• Collaborate with the GRC team to assess and manage compliance and regulatory requirements with key stakeholders.
• Evaluate Booz Allen internal information systems and environments for adherence to NIST SP 800-171 security controls and CMMC requirements.
• Analyze technical and environmental details to understand the threat landscape and maintain accountability for compliance with stakeholders.

Requirements

• 8+ years of cybersecurity experience in roles such as Security Control Assessor, System Steward, Information System Owner, Controls Validator, ISSO, ISSE, or ISSM.
• Experience conducting in-depth assessments of cybersecurity controls, artifacts, and scanning results to gauge effectiveness and sustain continuous compliance; ability to advise on technical security implementations.
• Proven track record partnering with IT, operations, and delivery teams to provide guidance, drive GRC initiatives, and foster security awareness.
• Experience using automation and AI‑driven tools to streamline control assessments, improve evidence collection, and accelerate compliance validation activities.
• Background with DoD, FISMA, FedRAMP, NIST, RMF, DevSecOps, and Infrastructure-as-Code (IAC), applying these frameworks to security controls and risk reduction for IL5 environments.
• Knowledge of network defense tools.
• Familiarity with security control alignment and assessment against NIST SP 800-53 rev. 4 and rev. 5, NIST SP 800-171 rev. 2 and rev. 3, FedRAMP, CMMC, or SOC 2 Type II.
• Ability to manage the full risk lifecycle from vulnerability identification to mitigation and closure, using qualitative and quantitative methods.
• Ability to develop and communicate technical and non‑technical metrics on compliance trends and vulnerability management across multiple business lines.
• High School Diploma or GED.

Technologies

• Infrastructure-as-Code (IAC)
• AI‑driven tools

Compensation

Salary range: USD 77,600 - 176,000 per year.

Benefits

• Health benefits
• Life benefits
• Disability benefits
• Financial benefits
• Retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work‑life programs
• Dependent care
• Recognition awards program

Identity Verification

As part of the hiring process, you will complete an identity verification process that uses advanced biometrics and artificial intelligence to ensure authenticity and prevent identity fraud. You are expected to be on camera during interviews and assessments. Booz Allen reserves the right to capture a photo to verify identity and prevent fraud.

Candidate AI Usage Policy

AI is part of Booz Allen's daily work, and the firm supports responsible use of AI tools. The use of artificial intelligence to assist with responses during interviews is prohibited unless explicit permission is provided.

Work Model

• Remote: Occasional in-person work at Booz Allen or a customer facility may be required.
• Hybrid: Frequent work from a Booz Allen facility; may require visits to a customer facility.
• Onsite: Primary work at a Booz Allen office or customer facility, with collaboration as needed.

Commitment to Non‑Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law. Booz Allen Hamilton adheres to equal opportunity and compliance with applicable employment laws.