Information Security Risk Specialist

About the Role

As an information security risk specialist, you will assist military leaders with discovering their cyber risks, understanding applicable policies, and developing a mitigation plan. You will gather technical and personnel details from subject matter experts and system engineers to help assess the entire threat landscape. You will guide clients through plans of action with presentations, white papers, and milestones, and translate security concepts so they can make the best decisions to secure their critical infrastructure and mission-critical systems.

Key Responsibilities

• Assist military leaders with discovering their cyber risks.
• Understand applicable policies.
• Develop a mitigation plan.
• Gather technical and personnel details from subject matter experts and system engineers.
• Assess the entire threat landscape.
• Guide clients through a plan of action with presentations, white papers, and milestones.
• Translate security concepts.

Requirements & Tech Stack

• Experience supporting cybersecurity, information security, risk management, compliance, or incident response in an internship, fellowship, academic project, or extracurricular activity.
• Knowledge of cybersecurity principles, information security concepts, and risk management fundamentals.
• Ability to analyze technical and non-technical information, document findings, and communicate recommendations in written and verbal formats.
• Ability to obtain a Secret clearance.
• Scheduled to obtain a Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Computer Science, or Risk Management by Winter 2026.
• Ability to obtain a Security+ Certification within 6 months of hire date.

Nice To Have

• Experience supporting cybersecurity assessments, vulnerability management, security operations, DevSecOps, incident response, or cyber defense exercises.
• Knowledge of NIST Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), CIS Controls, or other industry security frameworks.
• Ability to perform risk analysis, evaluate security controls, and support compliance documentation activities.
• Secret clearance.
• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Risk Management, or a related field.
• Cybersecurity Certifications such as CompTIA Security+ or Red Hat Certification.

Compensation

• Projected compensation range: $52,900.00 to $108,000.00 (annualized USD).

Clearance

• Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Work Model

• Employees working virtually are generally expected to have their cameras on during meetings.
• Remote: May still require occasional in-person work at a Booz Allen or customer facility.
• Hybrid: Expected to work from a Booz Allen or customer facility.
• Onsite: Primarily performed full-time at a customer facility.