Total 259 Legal / Public / Security job vacancies in 9598 Destiny USA Drive Syracuse, NY 13204

The Opportunity:

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action.

As an information security risk specialist on our team, you’ll work with Navy programs to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from engineers and subject matter experts to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, white papers, and milestones.

You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical networks and systems. This is your opportunity to take an active role in information security while growing your skills in cybersecurity, security and network tools, systems engineering, and data science.

Work with us as we protect our military's cybersecurity posture.

Join us. The world can’t wait.

You Have: 

• 3+ years of experience with steering packages through all stages of the Risk Management Framework (RMF) process and developing artifacts, including security assessment plans, systems security plans, and plans of action and milestones

• Experience with achieving system certification, accreditation, and assessment and authorization, including IATTs and ATOs

• Experience with using cyber hardening, vulnerability management, SCAP, STIGs, and scanning tools

• Experience with the analysis and maintenance of security policies, evaluating assessment documentation, and providing written security recommendations

• Knowledge of the systems and software engineering management process, and its implementation as applied to the DoD acquisition processes throughout all lifecycle phases

• Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders

• TS/SCI clearance

• HS diploma or GED

• CompTIA Security+ Certification

Nice If You Have: 

• Experience with DOD or Navy cybersecurity and acquisition processes

• Experience with technical writing, acquisition documentation, cybersecurity requirements, and contract language

• Experience with security tools and devices, including network firewalls, ports and protocols, web proxies, intrusion prevention systems, vulnerability scanners, or penetration tools

• Experience with operating systems, platforms, and technologies, including Windows, Linux, cloud, or virtualization

• Knowledge of Navy networks

• Ability to brief senior leadership on complex cybersecurity issues

• Master’s degree

• CISSP Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Key Role:

Provide advanced technical knowledge and analysis of highly specialized applications and operational environment, high-level functional systems analysis, design, integration, documentation, training, and implementation advice on complex problems which require doctorate level knowledge of cybersecurity for effective implementation. Apply principles, methods, and knowledge of specific functional areas of expertise to specific task order requirements. Provide advice on esoteric problems which require extensive knowledge of the subject matter. Design and prepare technical reports, studies, and related documentation, create executive level charts and graphs to record results, and prepare and deliver presentations, training, and briefings, as required.

Basic Qualifications:

• Experience with cyber operations and information security in a Joint environment 
• Experience with military operations
• Knowledge of Risk Management Framework and its functionality
• TS/SCI clearance
• HS diploma or GED and 12+ years of experience with information technology, Bachelor's degree and 8+ years of experience with information technology, or Master's degree in IT and 4+ years of experience with information technology
• DoD-8570 IAM Level 2 Certification 

Additional Qualifications:

• Experience with the Knowledge Management/Decision Support tool and Functional Capability Boards (FCB)
• Knowledge of Joint Force systems, operations, cyber mission planning, and execution
• Knowledge of JCIDS
• Completion of DAU training

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

This is a 6-month contract role based in Singapore office.

Responsibilities:

• Bring operational excellence to a team that handles a large volume of requests from law enforcement and ensure that all requests are scrutinized and handled in strict accordance with applicable law, our terms of service, and our law enforcement guidelines.
• Review, analyze and process high volumes of incoming requests from law enforcement authorities and governments in the Region, as business need arises, with high quality, speed, and accuracy.
• Record and clearly articulate operational decisions ensuring compliance in line with policies and procedures.
• Implement high-quality and efficient processes and practices for maintaining and exceeding productivity and quality service level agreements.
• Willing and able to maturely work with sensitive issues that may include graphic content which may be considered offensive or disturbing.

Requirements:

• Fluency in English is required.
• Excellent verbal and written communication skills.
• Strong attention to detail to ensure quality of work.
• Self-starter requiring minimal direction.
• Proven ability to analyze information to assess threat and risk.
• Proven ability to make effective decisions independently using good judgement and rationale.
• BA/BS degree and relevant operational experience.
• Experience prioritizing multiple functions and tasks while managing work time without compromising quality.
• General knowledge of the intersection of legal guidance, policy and free speech on the Internet (note that this is not a practicing attorney role).
• Knowledge of social media suite of products.
• Experience working independently and using good judgment.
• Experience with various computer systems, Internet technology and software.

Job Objectives:

Oversees the daily operations of the Security Department. Train all security personnel in their areas of responsibilities. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policy. Handles, documents, and follows up with necessary persons regarding any accidents occurring in the hotel premises. Documents all action in the department, including but not limited to: emergencies, loss, theft, or accident.

Primary Responsibilites

• Manages the Security Department.
• Advises on management of security matters.
• Trains all security personnel in their areas of responsibilities.
• Supervises all activities of security staff to ensure compliance with and proper application of department regulations and hotel policy.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting. Rooms Division Meeting and any other if requested.
• Coordinates emergencies with local authorities. Maintains good relations.
• Reviews emergency procedures regularly.
• Performs other duties as assigned by management.

Job Requirements

• Minimum education of Bachelor degree in Social Science or relevant discipline.
• At least 5 years’ experience in similar position in security & safety management. Loss prevention experience will be advantageous.
• Strong knowledge of local laws, investigative methods and fire safety.
• Criminal-free record.
• Have good English communication skills both written and spoken.
• Possess professional disposition with excellent communication and interpersonal skills.

The Opportunity:

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action.

As an information security risk specialist on our team, you’ll work with Navy programs to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from engineers and subject matter experts to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, whitepapers, and milestones.

You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical networks and systems. This is your opportunity to take an active role in information security while growing your skills in cybersecurity, security and network tools, systems engineering, and data science.

Work with us as we protect our military's cybersecurity posture.

Join us. The world can’t wait.

You Have: 

• 3+ years of experience steering packages through all stages of the Risk Management Framework (RMF) process and developing artifacts, including security assessment plans, systems security plans, and plans of action and milestones
• Experience achieving system certification, accreditation, and assessment and authorization, including IATTs and ATOs
• Experience using cyber hardening, vulnerability management, SCAP, STIGs, and scanning tools
• Experience with the analysis and maintenance of security policies, evaluating assessment documentation, and providing written security recommendations
• Knowledge of the systems and software engineering management process, and its implementation as applied to the DoD acquisition processes throughout all lifecycle phases
• Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders
• Secret clearance
• HS diploma or GED
• CompTIA Security+ Certification

Nice If You Have: 

• Experience with DoD or Navy cybersecurity and acquisition processes
• Experience with technical writing, acquisition documentation, cybersecurity requirements, and contract language
• Experience with security tools and devices, including network firewalls, ports and protocols, web proxies, intrusion prevention systems, vulnerability scanners, or penetration tools
• Experience with operating systems, platforms, and technologies, including Windows, Linux, cloud, or virtualization
• Knowledge of Navy networks
• Ability to brief senior leadership on complex cybersecurity issues
• TS/SCI clearance
• Master’s degree
• CISSP Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.  

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Key Role:  

Leverage engineering expertise to collaborate with a team of creative problem solvers to test and evaluate systems and devices, including internet-of-things and wearables for Department of Defense clients. Assess systems based on the NIST 800-53 Risk Management Framework (RMF) security controls. Conduct testing and analysis to identify vulnerabilities and potential threat vectors into systems and networks, analyze exploits, and engineer attack methodologies. Apply specific functional and working industry knowledge. Develop or contribute to solutions for a variety of problems of moderate scope and complexity. 

Basic Qualifications: 

• 8+ years of experience with complex cybersecurity projects or programs

• Experience conducting cyber penetration testing and analysis to assess vulnerabilities of wireless communication networks, including Bluetooth, Wi-Fi, or GPS

• Experience identifying recommendations to mitigate security vulnerabilities

• Experience working with mobile embedded systems, industrial control systems (ICS), or IoT devices

• Experience with software development for network embedded systems

• Knowledge of industry and government cybersecurity standards, tools, and processes

• Ability to perform technical assessments and communicate verbal and written results to a broad audience

• Secret clearance

• Bachelor’s degree

• IAT Level II Certification

Additional Qualifications:

• Experience with NIST, RMF, and Assessment and Authorization (A&A) activities to obtain and maintain an Authority to Operate or hardware accreditation

• TS/SCI clearance

• Master's degree

• CISSP Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.  

Create Your Career: 

Grow With Us 

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.  

A Place Where You Belong 

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.  

Your Candidate Journey 

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Global Legal Affairs and Compliance (GLAC) empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as Senior Vice President, Citi Wealth Legal (Capital Markets) - Hybrid (Internal Job Title: Assistant General Counsel - C14) based in Singapore. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future. For instance:

• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• We empower our employees to manage their financial well-being and help them plan for the future.
• We have a variety of programs that help employees balance their work and life, including generous paid time off packages.

In this role

The Assistant General Counsel role is a senior management-level position within the Wealth Asia North and Asia South Legal team, based in Singapore.

Responsibilities

• Advising on structuring, legal issues and documentation in relation to a wide range of Capital Markets products [Structured Notes, Bonds, Equities, Commodities, Foreign Exchange (FX), Fixed Income and International Swaps and Derivatives Association (ISDA) Master/Collateral Agreements] in the Asia Pacific region for the Citi Wealth Investments business including Citi Private Bank, International Personal Bank and regional investments desk.
• Advising the Wealth businesses on the implementation of global and local regulations affecting investment products (excluding funds), such as: Dodd Frank and other United States, Hong Kong and Singapore regulations, sales practice regulations (best execution, suitability, offshore conduct rules, fair dealing).
• Advising on new products, product programs, close-out/collateral netting
• Advising the trust business from time to time
• any other matters related to the Wealth Investment business

The role requires the candidate to :-

• Apply comprehensive understanding of multiple function areas, acting as a subject matter expert in area of expertise to achieve goals of the function
• Resolve moderately complex legal issues with moderate impact on business/function segment and provide legal advisory services
• Partner with business/functional line management in recommending, developing and executing business plans within permissible statutory and regulatory frameworks
• Coordinate resources to meet business needs and ensure efficient delivery of legal services in business or country/region
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.

As a successful candidate, you’d ideally have the following skills and exposure:

• 10+ years of post-qualification legal experience with a major law firm or financial institution
• Bachelor's degree/University degree
• Licensed to practice law
• Practical and solution-oriented, experienced in handling transactions independently
• Strong legal analytical skills, judgment and relationship building skills
• Willingness to learn, team player
• Familiarity with legal and bank regulatory/securities law framework in the Asia Pacific region and United States
• Preferred, In-house experience supporting capital markets/investments business

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Key Role:

Function as a security control assessor as part of a team in the performance of Assessment and Authorization (A&A) activities ensuring National Institute of Standards and Technology (NIST) management, operation, technical, and privacy security control implementation compliance for large, complex DoD information systems. Provide support for executing full A&A life cycle and risk management functions, measuring risk, examining system documentation, interviewing appropriate system and site personnel, testing system technical security configuration settings, reviewing scan results, using Platform IT (PIT), and developing findings reports. Demonstrate subject matter expertise in NIST security guidance and security control assessment (SCA) processes using the NIST Risk Management Framework (RMF).

Basic Qualifications:

• 2+ years of experience providing security guidance and IS validation using NIST, RMF, DoD, and local security policies
• Experience planning and executing comprehensive cybersecurity test events, including identifying security controls, analyzing assessment procedures, and identifying and using required tools, including Assured Compliance Assessment Solution (ACAS) or Security Content Automation Protocol (SCAP)
• Experience providing configuration management (CM) for information system security software, hardware, and firmware, and coordinating changes and modifications as an ISSO, ISSM, or Security Control Assessor
• Experience interfacing with information assurance managers, including preparing and reviewing documentation such as Systems Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and Plan of Actions and Milestones (POA&Ms)
• Knowledge of NIST Contingency Planning, POA&M management, and DoD continuous monitoring
• Top Secret clearance
• Bachelor's degree
• Cybersecurity IAT-Level III Certification

Additional Qualifications:

• Experience with DoD Cybersecurity policies, directives, and DoD STIGs
• Experience leveraging ACAS, CMRS, and eMASS tools 
• Experience assessing organizational risks and recommending mitigation strategies

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Opportunity:

Everyone is trying to “harness the cloud,” but not everyone knows how to secure it. As a security engineer, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. What if you could use your cloud security skills to improve mission critical applications for the Intelligence Community (IC)? We need you to help us develop cloud-based security architectures for some of the IC's most critical systems.

As a security engineer on our team, you’ll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements. You'll assist in defining an organizations’ state and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives. You'll assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You’ll recommend tools and capabilities based on your research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) security requirements. Your technical experience will be vital as you work with IC clients to ensure standards are met with IA and security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment while collaborating with tomorrow’s cloud security experts.

Join us. The world can’t wait.

You Have:  

• Experience developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans

• Experience with cloud security architecture design, evaluations, guidance development, and troubleshooting

• Experience with the RMF

• Experience working in an Agile development environment using the JIRA tracking tool

• TS/SCI clearance with a polygraph

• HS diploma or GED

• Ability to obtain a Security+ CE, SSCP, CCNA-Security, or GSEC Certification within 6 months of hire​

Nice If You Have:  

• Experience with the software development life cycle (SDLC)

• Experience with cloud technologies

• Possession of excellent team leadership, development, and client relationship skills

• Possession of excellent interpersonal skills to successfully interact with clients, engineers, and managers

• Possession of excellent verbal and written communication skills

• Security+ CE, SSCP, CCNA-Security, or GSEC Certification

Clearance:  

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Business Risk and Control Officer is a strategic professional who stays abreast of developments within own field and contributes to directional strategy by considering their application in own job and the business. Recognized technical authority for an area within the business. Requires basic commercial awareness. There are typically multiple people within the business that provide the same level of subject matter expertise. Developed communication and diplomacy skills are required in order to guide, influence and convince others, in particular colleagues in other areas and occasional external customers. Significant impact on the area through complex deliverables. Provides advice and counsel related to the technology or operations of the business. Work impacts an entire area, which eventually affects the overall performance and effectiveness of the sub-function/job family.

The Business Risk and Control Officer will be a key member of the Legal Risk & Control Team supporting both the Legal Department and the Regulatory Strategy and Policy (RSP) team with focus on the Global Assessment Unit coordination role as well as supporting the implementation and execution of new BAU transformation processes to ensure appropriate adherence to firm-wide initiatives and requirements, including operational and compliance risk management programs.

Responsibilities:

Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

• Help contribute to governance and the facilitation of the execution of the Manager Control Assessment (MCA, i.e. Risk & Control Self-Assessment) as required by the MCA Standard including the assessment and appropriate approval of risk associated with business changes. 
• Support teams in the quality, completeness, and accuracy of the implementation of the Control Framework, including Risk Control Policy, Control Standard, Issue Management Policy, Lesson Learned Policy and Control Inventory.
• Assist in performing a detailed analysis on the identification of issue root cause, partnering with control and process owners to recommendations holistic corrective actions and improvements, provide check and challenge to ensure appropriate escalation in according with Issue Management and Escalation Policies.
• Help contribute to the Lessons Learned Policy, including monitoring of control breaches and dissemination and learnings across other business units for process improvement to limit the occurrence of similar future events and where similar risk exposure might exist.
• Support the review and challenge process, within the FLUs, on the effective design and management of controls to mitigate risks as required by the Control Standards, including implementation and operation, conducting the control monitoring, handling deficiencies, and escalating issues for resolution. 
• Help contribute to the timeliness, accuracy and completeness of the MCA through controls prior to the execution of a process (QC).
• Assist in the monitoring of the adherence to the MCA Standard through controls after the execution of a process (QA).
• Support in dealing with Operational and Compliance Risk in accordance with established Policy requirements.
• Assist in performing a detailed analysis to identify, assess, escalate, and manage risk exposures across Risk Categories (Operational Compliance, Strategic, Reputational, etc.), including material, emerging and concentration risks in accordance with enterprise Policies and the establishment of Key Indicators to monitor risk exposures.
• Assist in supporting Risk Appetite and monitor / assess exposures against this in accordance with enterprise requirements (if applicable).
• Be part of the process to identify, assess, record and response to Operational and Compliance Risk events, ensuring these are captured accurately, timely and in accordance with requirements.
• Help ensure that adequate governance and training are in place to support management of Risk profiles.
• Contribute to the risks associated with New Activities and changes to the Business, ensuring these are well understood and adequately controlled (if applicable).
• Support operational risk scenario analysis and stress testing for Operational Risk Capital requirements.
• Support with risk and control assessments or coordination for programs within various risk stripes and ensure sufficient subject matter expertise exists to enable management of these risks within the Business (e.g. third party, fraud, sanctions etc.) (if applicable).
• Coordinate risk and control responsibilities and ensure accountabilities are embedded within FLUs, including providing training and leading by example.
• Support with standards and procedures that conform to enterprise requirements and support sound operational and compliance risk management.
• Apply knowledge of the business, products or services to identify and implement control points and processes throughout the business.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
• Help contribute to governance and the facilitation of the execution of the Manager Control Assessment (MCA, i.e.. Risk & Control Self-Assessment) as required by the MCA Standard including the assessment and appropriate approval of risk associated with business changes. 
• Support the Global Assessment Unit Owner/Risk Owner to ensure the adherence to the MCA Standard and all requirements of the MCA Lifecycle are executed as is required.
• Support teams in the quality, completeness, and accuracy of the implementation of the Control Framework, including Risk Control Policy, Control Standard, Issue Management Policy, Lesson Learned Policy and Control Inventory.
• Assist in performing a detailed analysis on the identification of issue root cause, partnering with control and process owners to recommendations holistic corrective actions and improvements, provide check and challenge to ensure appropriate escalation in according with Issue Management and Escalation Policies.
• Help contribute to the Lessons Learned Policy, including monitoring of control breaches and dissemination and learnings across other business units for process improvement to limit the occurrence of similar future events and where similar risk exposure might exist.
• Support the review and challenge process, within Legal and RSP, on the effective design and management of controls to mitigate risks as required by the Control Standards, including implementation and operation, conducting the control monitoring, handling deficiencies, and escalating issues for resolution. 
• Help contribute to the timeliness, accuracy and completeness of the MCA through controls prior to the execution of a process (QC).
• Assist in the monitoring of the adherence to the MCA Standard through controls after the execution of a process (QA).
• Support in dealing with Operational and Compliance Risk in accordance with established Policy requirements.
• Assist in performing a detailed analysis to identify, assess, escalate, and manage risk exposures across Risk Categories (Operational Compliance, Strategic, Reputational, etc.), including material, emerging and concentration risks in accordance with enterprise Policies and the establishment of Key Indicators to monitor risk exposures.
• Assist in supporting Risk Appetite and monitor / assess exposures against this in accordance with enterprise requirements (if applicable).
• Be part of the process to identify, assess, record and response to Operational and Compliance Risk events, ensuring these are captured accurately, timely and in accordance with requirements.
• Help ensure that adequate governance and training are in place to support management of Risk profiles.
• Contribute to the risks associated with New Activities and changes to the Business, ensuring these are well understood and adequately controlled (if applicable).
• Support with risk and control assessments or coordination for programs within various risk stripes and ensure sufficient subject matter expertise exists to enable management of these risks within the Business (e.g. third party, fraud, sanctions etc.) (if applicable).
• Coordinate risk and control responsibilities and ensure accountabilities are embedded within Legal and RSP, including providing training and leading by example.
• Support with standards and procedures that conform to enterprise requirements and support sound operational and compliance risk management.
• Apply knowledge of the function to identify and implement control points and processes throughout Legal and RSP.
• Identify gaps in implementing policy documents and draft appropriate procedures to meet requirements of the Citi Policy governance operating model.
• Ensure timely execution of transformation milestones, deliverables, and activities in both the Global Legal and RSP functions as required.
• Engage in Global Function Partner discussions (ICRM, ORM), to enhance the control environment of both the Legal and RSP functions.
• Identify and follow up on control weaknesses, collaborate with issue owners in the definition of robust action plans, monitor progress, maintain meaningful data in the Integrated Corrective Actions Plan system, and ensure collation/verification of completion evidence.
• Participate in controls-related projects affecting the Legal & RSP organizations, including data-analysis, reporting exercises and policy drafting.
• Help manage and perform reporting for Legal and RSP risk and control programs across several requirements.

Qualifications:

• 6-10 years relevant work experience in Business Risk & Controls
• Oral, verbal, and written comprehension Spanish language skills are highly preferred
• MS Excel, MS Access, SAS, SQL, Visual Basic a plus. 5+ years’ experience in financial services.
• Proficient with the Manager’s Control Assessment module.
• Consistently demonstrates clear and concise written and verbal communication skills.
• Effective organizational influencing skills required.
• Experience with work-flow systems, excellent project management, and organizational skills.
• Demonstrated ability to lead global team efforts.
• Excellent problem-solving skills and self-motivated.
• Ability to see the big pictures with high attention to critical details.
• Demonstrated ability to develop and implement strategy and process improvement initiatives.

Education:

• Bachelor's/University degree, Master's degree preferred.

-------------------------------------------------

Job Family Group:

-------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Primary Location:

------------------------------------------------------

Primary Location Salary Range:

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Key Responsibilities:

• Develop and implement advanced cyber security architectures and solutions.
• Analyze and evaluate system security requirements to design secure networks.
• Collaborate with cross-functional teams to integrate security practices into all facets of the business.
• Conduct risk assessments and provide recommendations for enhancing system security.
• Stay updated with the latest cyber security threats and technologies.
• Develop technical solutions and tools to help mitigate security vulnerabilities.
• Provide technical guidance and support to other team members.
• Document and maintain records of security architectures and processes.

MUST HAVE:

• Bachelor’s degree in Computer Science or Information Technology or Cyber Security, or related field.
• Minimum of 3-5 years of experience in a cyber security architect or engineering role.
• Proven experience in designing and implementing secure network architectures.
• Strong background in network security, system security, and cloud security.
• Experience with common cyber security tools, standards, and protocols.
• Familiarity with industrial control systems and operational technology (OT) security is a plus.

WE VALUE:

• Strong technical skills in network and system security.
• Knowledge of current cyber security trends and threats.
• Excellent problem-solving and analytical abilities.
• Proficient in security technologies such as firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, etc.
• Good communication and collaboration skills.
• Ability to work independently and as part of a team.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.