Enterprise Cybersecurity Compliance Lead

The Opportunity:

Support the Enterprise Cybersecurity (ECS) Governance, Risk, and Compliance (GRC) team. Facilitate an effective enterprise-wide cybersecurity compliance function with a focus on maintaining compliance while enabling business efforts, including compliance across key areas such as federal, non-federal, international, company, and related efforts as the business evolves. Lead with a hands-on approach that has accountability for assessing and managing cybersecurity requirements with key stakeholders using a data-driven, threat-informed, and risk-based approach. Collaborate with cross-functional teams across the Booz Allen enterprise and client teams to ensure alignment and application of practices that support business goals, meet regulatory requirements, and define policies and standards for cybersecurity.Due to the nature of work performed within this facility, U.S. citizenship is required.

You Have:

• 8+ years of experience leading and maturing teams, including educating and developing direct reports while translating complex regulatory and technical requirements into clear, actionable guidance for technical staff and stakeholders
• Experience with facilitating cybersecurity compliance programs across federal, non-federal, and international frameworks and leading enterprise compliance programs and audit coordination, including oversight of internal and external audits, evidence collection, and remediation tracking across government and commercial standards, including Federal, Non-federal, and Global cybersecurity standards
• Experience driving cross-functional alignment between architecture, legal, and operations
• Ability to apply data-driven, threat-informed, and risk-based approaches to manage requirements, measure control effectiveness, continuous monitoring, and utilize automation and analytics tools to prioritize remediation and guide cross-functional executive decision-making
• Ability to translate complex regulatory requirements into actionable business outcomes by developing governance artifacts, implementing compliant workflows, and integrating "compliance-by-design" into products and services
• Ability to translate complex security mandates into plain language guidance for business teams, ensuring clear implementation expectations and navigating conflicting priorities to maintain business velocity while ensuring enterprise-wide compliance
• HS diploma or GED
• Ability to obtain a CMMC certification, such as Certified CMMC Assessor (CCA) or Certified CMMC Professional (CCP), within 12 months of start date

Nice If You Have:

• 10+ years of experience with cyber risk
• Experience in navigating complex technical challenges by identifying pragmatic solutions, determining the level of effort (LOE), and prioritizing resources to drive projects from initial comprehension to successful closure with minimal supervision
• Experience in coaching junior-to-mid-level staff through career progression, fostering a culture of continuous learning, and building a "compliance-ready" mindset across non-technical business units
• Experience implementing GRC automation platforms, such as eMASS, ServiceNow, RSA Archer, CSAM, or Telos Xacta
• Ability to demonstrate excellent executive presence
• Possession of excellent verbal and written communication skills, including translating technical risks into logical conclusions for senior leadership
• Cyber Risk Certifications, including Certified Information Systems Security Professional (CISSP) or Project Management Professional (PMP) Certification

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.

• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.

• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.