> Markdown version of [/jobs/ext/4509133-information-security-risk-specialist](https://www.wearedevelopers.com/jobs/ext/4509133-information-security-risk-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Risk Specialist - **Company:** Booz Allen Hamilton Inc. - **Location:** Oklahoma City, OK, United States - **Experience:** Expert - **Salary:** $99,000.0 - $225,000.0 - **Contract:** Permanent contract - **Skills:** Xacta, Amazon Web Services, Microsoft Azure, Cyber Security, Information Systems, Data Security, Identity and Access Management, Cloud Platform System, Information Technology - **Published:** November 2, 2026 - **Apply:** https://www.careerbuilder.com/job-details/information-security-risk-specialist-oklahoma-city-ok--9660b7d8-c9ac-4582-950e-a1dcfa305382 ## About the Role Information/Data Security (InfoSec), Risk, Information/Data Security (InfoSec), Risk, United States Department of Defense (DoD), Information Technology & Information Systems, Computer Security, People Management, Organizational Development/Management, Maintain Compliance, * 5+ years of experience in a Cybersecurity role * Experience with the DoD RMF accreditation process * Experience with RMF, STIGs, NIST 800-53, NIST 800-37, or eMASS * Experience with implementing and maintaining security controls and with cloud environments, including AWS or Azure * Ability to conduct ACAS scans and build ATO packages for Xacta or eMASS submission * Ability to work through challenging security requirements and maintain compliance * Ability to develop technical documentation to support accreditation efforts * Top Secret clearance * Bachelor's degree * IAM Level 1 or higher Certification Nice If You Have: * Experience as an ISSM Clearance ## Description Conduct security assessments on DoD cloud environments using the Risk Management Framework (RMF). Assist in providing guidance on policies and procedures to ensure compliance within an accreditation boundary. Implement security strategies to control and manage organizational information risks. Assess information systems to determine risk exposure and develop documentation addressing system security requirements. Enhance information security education within the organization and team. Monitor the latest security technologies to ensure that project personnel remain in the know.