Enterprise Cybersecurity Compliance Lead

The Opportunity:

Support the Enterprise Cybersecurity (ECS) Governance, Risk, and Compliance (GRC) team. Facilitate an effective enterprise-wide cybersecurity compliance function with a focus on maintaining compliance while enabling business efforts, including compliance across key areas such as federal, non-federal, international, company, and related efforts as the business evolves. Lead with a hands-on approach that has accountability for assessing and managing cybersecurity requirements with key stakeholders using a data-driven, threat-informed, and risk-based approach. Collaborate with cross-functional teams across the Booz Allen enterprise and client teams to ensure alignment and application of practices that support business goals, meet regulatory requirements, and define policies and standards for cybersecurity.Due to the nature of work performed within this facility, U.S. citizenship is required.

You Have:

• 10+ years of experience leading and maturing teams, including educating and developing direct reports while translating complex regulatory and technical requirements into clear, actionable guidance for technical staff and stakeholders

• Experience with facilitating cybersecurity compliance programs across federal, non-federal, and international frameworks and leading enterprise compliance programs and audit coordination, including oversight of internal and external audits, evidence collection, and remediation tracking across government and commercial standards, including Federal, Non-federal, and Global cybersecurity standards

• Experience driving cross-functional alignment between architecture, legal, and operations

• Ability to apply data-driven, threat-informed, and risk-based approaches to manage requirements, measure control effectiveness, continuous monitoring, and utilize automation and analytics tools to prioritize remediation and guide cross-functional executive decision-making

• Ability to translate complex regulatory requirements into actionable business outcomes by developing governance artifacts, implementing compliant workflows, and integrating "compliance-by-design" into products and services

• Ability to translate complex security mandates into plain language guidance for business teams, ensuring clear implementation expectations and navigating conflicting priorities to maintain business velocity while ensuring enterprise-wide compliance

• HS diploma or GED

• Ability to obtain a CMMC certification, such as Certified CMMC Assessor (CCA) or Certified CMMC Professional (CCP), within 12 months of start date

Nice If You Have:

• 10+ years of experience with cyber risk

• Experience in navigating complex technical challenges by identifying pragmatic solutions, determining the level of effort (LOE), and prioritizing resources to drive projects from initial comprehension to successful closure with minimal supervision

• Experience in coaching junior-to-mid-level staff through career progression, fostering a culture of continuous learning, and building a "compliance-ready" mindset across non-technical business units

• Experience implementing GRC automation platforms, such as eMASS, ServiceNow, RSA Archer, CSAM, or Telos Xacta

• Ability to demonstrate excellent executive presence

• Possession of communication skills with a track record of translating technical risks into logical conclusions for senior leadership

• Cyber Risk Certifications, including Certified Information Systems Security Professional (CISSP) or Project Management Professional (PMP) Certification

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you'll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you'll work with colleagues and clients in person, as needed for the specific role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.