Cybersecurity Advisor

General Dynamics Information Technology•Bethesda, MD

5d•$165,750 - $224,250•Hybrid

About The Position

Implement the Network Services Information Assurance Program and ensure security controls function correctly. Standardize templates, processes, and policies in alignment with NIH and HHS guidance, and participate in NIH and CIT security working groups. Lead the development and maintenance of security documentation, including POA&Ms and waivers. Conduct annual risk assessments and security impact analyses, support incident response, and oversee ATO-related activities for Network Services. Maintain technical security documentation, including SSPs, architecture diagrams, and data flows. Conduct continuous monitoring, vulnerability assessments, and compliance reviews, and manage remediation activities and waiver documentation. Assess controls and ensure security controls are implemented and maintained in accordance with the SSP and agency policies. Collaborate with technical subject matter experts to capture requirements and maintain system information security compliance. Review accounts and deactivate unused accounts and accounts belonging to departing employees. Produce weekly, monthly, and quarterly status reports; support agency audits on behalf of Network Services and provide evidence; review cybersecurity posture and operational dashboards; and communicate noteworthy risks or threats to program and customer executives. Lead coordination meetings with security teams and stakeholders, oversee modernization and cloud-related security tasks, establish cybersecurity reporting standards and metrics, participate in governance committees, conduct quarterly risk register reviews, oversee testing including penetration tests, and support annual enterprise risk assessments and governance material updates. The role is based in Bethesda, Maryland, with hybrid telecommuting options. The position requires 40 scheduled hours per week and no travel. The stated likely salary range is $165,750–$224,250, with compensation determined by experience, geographic location, and potentially contractual requirements.

Requirements

Bachelor of Science degree in Computer Science or Information Systems, or equivalent experience (15+ years).
Must have one or a combination of the following certifications: Security+, CAP, CISSP, CISA, or CEH.
In-depth knowledge of Federal security policies, standards, guidelines, and NIST frameworks.
Experience in requirements analysis, mitigation, and control implementation.
Ability to obtain a Public Trust.
The job qualifications list 10+ years of related experience.

Nice To Haves

Experience with FISMA, RMF, and the NIST SP 800 series.
Hands-on vulnerability management experience.
Project management experience.
Ability to produce high-quality deliverables and manage deadlines.
Strong analytical and communication skills.
Ability to work independently and collaborate with diverse teams.

Responsibilities

Implement the Network Services Information Assurance Program and ensure security controls function correctly.
Standardize templates, processes, and policies in alignment with NIH and HHS guidance.
Participate in NIH and CIT security working groups.
Lead development and maintenance of security documentation, including POA&Ms and waivers.
Conduct annual risk assessments and security impact analyses, and support incident response.
Oversee ATO-related activities for Network Services.
Maintain technical security documentation, including SSPs, architecture diagrams, and data flows.
Conduct continuous monitoring, vulnerability assessments, and compliance reviews.
Manage and track remediation activities and waiver documentation.
Conduct assessments of controls and ensure security controls are implemented and maintained in accordance with the SSP and agency policies.
Collaborate with technical subject matter experts to capture requirements and maintain system information security compliance.
Review accounts and deactivate unused accounts and accounts belonging to departing employees.
Produce weekly, monthly, and quarterly status reports.
Support agency audits on behalf of Network Services and provide required evidence.
Review cybersecurity posture and operational dashboards.
Communicate noteworthy risks or threats to program and customer executives.
Lead coordination meetings with security teams and stakeholders.
Oversee modernization and cloud-related security tasks.
Establish standards and metrics for cybersecurity reporting.
Participate in governance committees and conduct quarterly risk register reviews.
Oversee testing activities, including penetration tests.
Support annual enterprise risk assessments and updates to governance materials.

Benefits

Medical plan options, including some with Health Savings Accounts.
Dental plan options.
Vision plan.
401(k) plan with pre-tax and post-tax contributions and a company match.
Full flex work weeks where possible.
Paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life insurance.
Accidental death and dismemberment coverage.
Personal accident insurance.
Critical illness insurance.
Business travel and accident insurance.