Information Systems Security Manager - TS​/SCI Polygraph

Job Qualifications

Cloud:
Amazon Web Services (AWS), Plan of Action and Milestones (POA&M), RMF, Xacta (Platform)

Seize your opportunity to make a personal impact as an Information Systems Security Management professional supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.

At GDIT, people are our differentiator. As an Information Systems Security Manager (ISSM) , you will help ensure today is safe and tomorrow is smarter. Our work depends on an ISSM joining our highly skilled team to be a premier provider of cyber security services to the customer. We provide consummate cyber security risk management "as a service" platform across multiple fabrics and centers.

We have responsibility to ensure operational IT capabilities provide the client with necessary timeliness, accuracy and security of information demanded from all our highly professional roles. Be the change, lead our change – join us!

Regular

Top Secret SCI + Polygraph

Top Secret SCI + Polygraph

None

Cyber and IT Risk Management

Job Qualifications:

Cloud:
Amazon Web Services (AWS), Plan of Action and Milestones (POA&M), RMF, Xacta (Platform)

None

8 + years of related experience

Yes

• Support customer RMF workflow and processes by proposing, coordinating, implementing and enforcing information system security policies, instructions, standards, and methodologies
• Review and approve customer requests related to accesses, devices, and other authorizations
• Evaluate the impact of network and system changes using RMF processes and approve the changes
• Manage multiple projects throughout Authorization and Accreditation (A&A) process from concept to Authority to Operate (ATO)
• Coordinate with system stakeholders on mitigating system vulnerabilities outlined in POA&Ms
• Ensure compliance with NIST 800-53 controls and relevant cybersecurity standards
• Ensure configuration management for security-relevant IS software, hardware and firmware is maintained and documented
• Ensure system recovery processes are monitored to ensure security features and procedures are properly restored
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals
• Formally notify the appropriate individuals when changes occur that might affect authorization
• Participate in governance and project reviews identified by the customer
• Require strong documentation skills to create and update policies, process documentation and procedures
• Conduct internal audits to ensure compliance with RMF requirements
• Demonstrated experience with RMF, ICD 503, CNSSI 1253, NIST SP 800-53/53A, and STIGs

• Education:
  
  Bachelors (Computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline)
• Required Certification:
  CompTIA Advanced Security Practitioner (CASP+)
• Required Experience:
  
  8+ yrs
• Required Technical
  
  Skills:
• Require strong documentation skills to create and update policies, process documentation and procedures
• Experience with Service Now, Tenable, and other SCAP Compliant tools
• Demonstrated experience with RMF, ICD 503, CNSSI 1253, NIST SP 800-53/53A, and STIGs
• Security Clearance Level: TS/SCI with active polygraph
• Preferred
  
  Certifications:
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+
• Certified Information Systems auditor (CISA)
• Certified Information Security Manager (CISM)
• AWS Solutions Architect Associate or Professional
• Location…