Cyber Compliance Officer

Type of Requisition:
Regular

Clearance Level Must Currently Possess:
Secret

Clearance Level Must Be Able to Obtain:
Secret

Public Trust/Other

Required:


None

Job Family:
Cyber and IT Risk Management

Job Qualifications:

Skills:
Customer Service, Cybersecurity Compliance, Information Technology Security, IT Documentation, RMF
Certifications:
None
Experience:
4 + years of related experience
ship

Required:


Yes

Job Description:

Cyber Compliance Officer

We are GDIT. We stay at the forefront of innovation to solve complex technical challenges. GDIT is your place-make it your own by discovering new ways to apply the latest technologies securely and expertly. Our work depends on a Cyber Compliance Officer joining our team to support the Guard Enterprise Cyber Operations Support (GECOS) program in Falls Church, VA.

This is an IT Service Management (ITSM) contract supporting the operation, modernization, expansion, and evolution of the Army National Guard's (ARNG) global IT services, including networking, compute, storage, infrastructure, applications, hosting, and program management. The GECOS program supports the ARNG enterprise IT infrastructure, its WAN, authentication and directory services, cybersecurity, application hosting, and associated services, leveraging ITIL best practices.

As a Cyber Compliance Officer, you will provide cybersecurity compliance support in accordance with applicable DoD and Army guidance and regulations. You will work closely with the client and senior staff, so clear, articulate communication is essential. You must be collaborative and able to work within a team, while also being a self-starter who can complete tasks independently and explain complex technical information in an easily understood manner.

Responsibilities

The Cyber Compliance Officer will:

• Provide Risk Management Framework (RMF) support to the 54 supported organizations (50 states, three territories, and the District of Columbia) for Installation Campus Area Networks (ICANs) and HQ Enterprise investments, including eMASS record reviews.
• Serve as an RMF SME to the 54, delivering customer training and briefs, managing multiple states simultaneously, and briefing the Program Information System Security Manager (P-ISSM) on progress, hurdles, and roadblocks.
• Provide RMF support for Steps 0-3, 5, and 6:
  • Step 0:
    Deliver RMF roles and responsibilities training.
  • Step 1:
    Guide system/ICAN categorization.
  • Step 2:
    Guide security control baseline selection.
  • Step 3:
    Advise on security control implementation and delegation of technology areas in eMASS.
  • Step 5:
    Support submission of ATO package artifacts to the Authorizing Official.
  • Step 6:
    Support continuous monitoring (Con Mon) strategies and execution.
• Identify and maintain cybersecurity compliance requirements for IT investments of the 54 and the DoDIN-A(NG) and DoDIN-A(NG)-S networks and computing services.
• Ensure adherence to DoD, DISA, and Department of the Army enterprise security requirements, including preparation for and successful completion of CCRIs, obtaining and maintaining Authority to Connect (ATC) and Authority to Operate (ATO), and compliance with STIGs and required IA controls.
• Help ensure compliance with Army directives and mandates aligned with the future Joint Information Environment (JIE) architecture.
• Measure ARNG compliance with cybersecurity requirements and recommend program execution activities, processes, and practices.
• Assist with secure configuration and preparation of IT below the system level (Software Assurance) across the 54 in coordination with RCC-NG, in accordance with applicable guidance prior to acceptance into or connection to Army IS and DoDIN-A(NG).
• Maintain an Accreditations and Expiration Dates Record for upcoming accreditation expirations using RMF Work Management SharePoint tracking tools.
• Ensure cybersecurity inspections, tests, assessments, and reviews are synchronized and coordinated with all stakeholders.
• Assist in the implementation, management, and administration of organizational structure and workflow within eMASS.
• Review cybersecurity information papers and plans with CYBERCOM, ARCYBER, Air National Guard Cyber, NSA, FBI, DOJ, and DHS.
• Support enforcement of the DoD Cyberspace Workforce Framework (DCWF) and cybersecurity certification program to ensure training and certification are enforced, managed, and reported.
• Help implement a streamlined process for reviewing, processing, and approving eMASS system access requests in support of RMF.
• Assist in examining security architectures and vulnerabilities through scans, configuration reviews, design documentation, and stakeholder interviews.
• Support identification, dissemination, and delivery of approved policy and process documentation for system authorization efforts using DoD, Army, and NIST guidance.

Qualifications

Education / Training

• Bachelor's degree in cybersecurity, information assurance, computer science, or related technical discipline; or equivalent combination of education, technical certifications/training, and work…