> Markdown version of [/jobs/ext/1448656-information-security-risk-specialist-senior](https://www.wearedevelopers.com/jobs/ext/1448656-information-security-risk-specialist-senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Risk Specialist, Senior

- **Company:** Booz Allen Hamilton Inc.
- **Location:** Pittsburgh, PA, United States
- **Experience:** Expert
- **Salary:** $73,000.0 - $166,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Excel, Data Analysis, Cyber Security, Federal Information Processing Standards (FIPS), Privacy Controls, Data Analytics, Tenable Nessus
- **Published:** July 26, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/75336069/1

## About the Role

* Experience with NIST special publications and FIPS
 * Experience with information security and assurance principles, including the NIST Cybersecurity Framework and RMF process
 * Experience with leading and coaching efforts involving presentations, SOPs, whitepapers, and change management processes
 * Experience with assessing NIST security and privacy controls and maintaining Plans of Action and Milestones (POA&Ms)
 * Experience with analyzing data from Governance Risk Compliance (GRC) tools, including eMASSorRiskVision to determine trends, root cause, and possible solutions
 * Experience with providing guidance for the NIST security and privacy controls and for providing sufficient documentation and artifacts for each control in the GRC tool
 * Experience in reviewing security requirements, recommending a mitigation strategy for deficiencies, and working directly with clients to provide solutionsand education
 * Experience with performingannual security reviews in accordance with FISMA reporting
 * Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
 * Master's degree in CS, Engineering, or IT and 5+ years of experience with IT or 15+ years of experience with IT in lieu of a degree

Nice If You Have:

 * Experience with Privacy and Security control implementation, testing and assessment, and POAM management
 * Experience with using data analytical tools
 * Experience with the VA
 * Experience with scanning tools
 * Experience with creating formulas and data analysis in Excel
 * Possession of excellent customer service and organization skills
 * Possession of excellent verbal and written communication skills
 * Public Trust
 * CAP, CISSP, CISM, PMP, or CCSK Certification

Vetting:

Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client; Public Trust determination is required.

## Description

As an information security risk specialist on our team, you'll use your experience to work witha government clientto discover their cyber risks, understand applicable policies, and develop a mitigation plan. You'll review technical, environmental, and personnel details to assess the entire threat landscape. Then, you'll guide the Veterans Administration (VA) client through a plan of action with presentations, white papers, and milestones.

You'll work with your client to translate security concepts, so theycan make the best decisions to secure their mission critical systems and critical infrastructure. This is your opportunity to act as an information security subject matter expert while broadening your skills in Risk Management Framework and NIST Security and Privacy controls.Join us as we protect VA systems and data and provide a safer cyber environment for Veteran's healthcare.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail)
- [Data Science on Software Data](https://www.wearedevelopers.com/videos/162-data-science-on-software-data)
- [How Data is Shaping our Games](https://www.wearedevelopers.com/videos/176-how-data-is-shaping-our-games)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)