Cybersecurity Advisor

General Dynamics Information Technology • Bethesda, MD

4d • $165,750 - $224,250 • Hybrid

About The Position

The Cybersecurity Advisor implements the Network Services Information Assurance Program and ensures that security controls function correctly. The role standardizes templates, processes, and policies in alignment with NIH and HHS guidance; participates in NIH and CIT security working groups; and leads the development and maintenance of security documentation, including POA&Ms and waivers. Responsibilities also include annual risk assessments, security impact analyses, incident response support, ATO-related activities, and maintenance of technical documentation such as SSPs, architecture diagrams, and data flows.

The advisor conducts continuous monitoring, vulnerability assessments, and compliance reviews; tracks remediation and waiver documentation; and supports agency audits by providing evidence. The role collaborates with technical subject matter experts and stakeholders, maintains system information security compliance, reviews accounts, produces recurring status reports, communicates risks to program and customer executives, and oversees modernization, cloud security, and testing activities. The position is hybrid in Bethesda, Maryland, with 40 scheduled weekly hours and no travel required.

Requirements

• Bachelor of Science degree in Computer Science, Information Systems, or equivalent experience; the posting specifies 15+ years for equivalent experience.
• At least one of the following certifications: Security+, CAP, CISSP, CISA, or CEH.
• In-depth knowledge of federal security policies, standards, guidelines, and NIST frameworks.
• Experience in requirements analysis, mitigation, and control implementation.
• Ability to obtain a Public Trust.
• The job qualifications section also lists 10+ years of related experience.

Nice To Haves

• Experience with FISMA, RMF, and the NIST SP 800 series.
• Hands-on vulnerability management experience.
• Project management experience.
• Ability to produce high-quality deliverables and manage deadlines.
• Strong analytical and communication skills.
• Ability to work independently and collaborate with diverse teams.

Responsibilities

• Implement the Network Services Information Assurance Program and ensure security controls function correctly.
• Standardize templates, processes, and policies in alignment with NIH and HHS guidance.
• Participate in NIH and CIT security working groups and governance committees.
• Lead development and maintenance of security documentation, including POA&Ms, waivers, SSPs, architecture diagrams, and data flows.
• Conduct annual and enterprise risk assessments, security impact analyses, quarterly risk register reviews, and updates to governance materials.
• Support incident response and oversee ATO-related activities for Network Services.
• Conduct continuous monitoring, vulnerability assessments, compliance reviews, and reviews of cybersecurity posture and operational dashboards.
• Manage and track remediation activities and waiver documentation.
• Assess controls and ensure their implementation and maintenance in accordance with the SSP and agency policies.
• Collaborate with technical subject matter experts to capture requirements and maintain system information security compliance.
• Review accounts and deactivate unused accounts and accounts of departing employees.
• Produce weekly, monthly, and quarterly status reports and establish cybersecurity reporting standards and metrics.
• Support agency audits on behalf of Network Services and provide required evidence.
• Communicate noteworthy risks or threats to program and customer executives.
• Lead coordination meetings with security teams and stakeholders.
• Oversee modernization, cloud-related security tasks, and testing activities, including penetration tests.

Benefits

• Medical plan options, including options with Health Savings Accounts.
• Dental plan options.
• Vision plan.
• 401(k) plan with pre-tax and post-tax contribution options and a company match.
• Full flex work weeks where possible.
• Paid time off, including vacation, sick and personal time, holidays, and paid parental, military, bereavement, and jury duty leave.
• Short- and long-term disability benefits.
• Life insurance.
• Accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior