Information System Security Manager (RMF)

About the role

Booz Allen is looking for an Information System Security Manager (ISSM) to manage the Risk Management Framework (RMF) authorization of assigned information systems. The role ensures systems are operated, maintained and disposed of in line with security policies and procedures, and oversees continuous monitoring, vulnerability management and incident recovery.

Key responsibilities

• Manage RMF authorization of assigned information systems and ensure they follow the security plan
• Run periodic assessments of authorized systems and make sure findings and vulnerabilities are fixed in a timely way
• Maintain responsibility for continuous monitoring, including audit record analysis and the vulnerability management cycle
• Monitor incident recovery so security features and procedures are restored and working
• Analyze, store and protect user activity monitoring data in line with program policies

Required profile

• Top Secret clearance; applicants undergo a security investigation and must meet eligibility requirements for classified information
• HS diploma or GED with 6+ years as an ISSM or ISSO, or a bachelor's degree with 4+ years as an ISSM or ISSO
• Ability to complete required ISSM training within 90 days of hire
• Ability to be briefed into Special Access Programs (SAPs)

Required skills

• System administration in a networked environment
• eMASS, STIGs, computer networking and operating systems
• Preferred: NISPOM, JSIG, ICD 503 and 703, RMF process, NIST publications, classified contracts and DD 254
• Preferred: CCNA, Red Hat or Windows certification

What we offer

• Projected annual salary of $99,000 to $225,000 depending on location, qualifications and experience
• Health, life, disability, financial and retirement benefits, paid leave and tuition assistance
• Recognition awards and work-life programs