DFAS EFD IA/Cyber Analyst

CGI•Fairfax, VA

5d•Hybrid

About The Position

CGI Federal is seeking an IA/Cyber Analyst to support upgrade work and system sustainment for its Defense Finance and Accounting Service (DFAS) client team. The role works with a geographically dispersed team and collaborates with CGI, DFAS, and DISA professionals to help the client achieve its mission goals. The position is based in Fairfax, Virginia, with a hybrid work model acceptable. The analyst manages and updates Risk Management Framework (RMF), FISCAM, and NIST materials; performs vulnerability assessments and security impact analyses, including generating and managing Plans of Action and Milestones (POA&Ms); supports Authorization to Operate (ATO) certification; and helps the client use cybersecurity and management tools. The role also evaluates and audits technical and operational controls, including Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs), and supports monitoring, analysis, compliance, and continuous improvement of system security.

Requirements

Five years of experience with ERP systems, auditing COTS products, and cloud architectures.
CompTIA Security+ certification.
U.S. citizenship.
Ability to obtain a Public Trust clearance.
Experience with DoD/DoW cyber and information assurance.
Experience with Risk Management Frameworks (RMF, FISCAM, NIST).
Vulnerability assessment and security impact analysis experience.
Governance and compliance experience, including evaluating and auditing technical and operational controls.
Experience with STIGs and SRGs.
ATO experience.
Continuous monitoring experience.
Experience with cybersecurity and management tools, including eMASS and CM.
DevSecOps experience.
Change and configuration audit experience.
Baseline configuration management experience.
Technical writing experience.
Experience with configuration management and IT service management tools.

Nice To Haves

CISSP certification.
CISM certification.
CySA+ certification.
CEH certification or other related certifications.

Responsibilities

Ensure information security evidence is complete, accurate, and less than one year old.
Respond to security data requests in a timely manner.
Collaborate with clients and cross-functional teams to support the design, configuration, and implementation of cybersecurity solutions.
Review Governance, Risk, and Compliance systems when system changes occur.
Organize, coordinate, and manage efforts in the ATO process.
Manage and implement security tools that support monitoring, analysis, and decision-making.
Communicate findings and recommendations clearly, translating technical concepts for cross-functional audiences.
Monitor compliance with federal, RMF, FISCAM, FISMA, and contractual cybersecurity requirements.
Organize continuous improvement efforts to strengthen system security posture.
Manage and update RMF, FISCAM, and NIST frameworks and related collateral.
Perform vulnerability assessments and security impact analyses, including POA&M generation and management.
Support the client's use of cybersecurity and management tools.
Evaluate and audit technical and operational controls, including STIGs and SRGs.
Support system upgrades and sustainment.