Polygraph

General Dynamics Information Technology•McLean, VA

1d•Onsite

About The Position

GDIT is hiring an Information Systems Security Management (ISSM) professional to support customer activities and provide cybersecurity risk management services. The role helps ensure operational IT capabilities deliver information with the required timeliness, accuracy, and security. The position is based onsite at a customer location in McLean, Virginia, and requires an active TS/SCI clearance with polygraph and U.S. citizenship. The ISSM supports programs, organizations, systems, or enclaves by managing analysts and applying the Agency Risk Management Framework (RMF) workflow and processes. The role coordinates with stakeholders to categorize information systems, assess information security and privacy impacts and risks, document controls, maintain system records in XACTA, evaluate system changes, address security anomalies, and maintain system security plans and security documentation. The role requires a bachelor’s degree in a relevant discipline and at least eight years of related experience. Preferred certifications include CISSP, CISA, NIST Cybersecurity Framework, and AWS Solutions Architect Associate or Professional. The position is scheduled for 40 hours per week, with less than 10% travel.

Requirements

Bachelor’s degree in computer engineering, computer science, electrical engineering, information systems, information technology, cybersecurity, or a closely related discipline.
At least 8 years of related experience.
Strong documentation skills for creating and updating policies, process documentation, and procedures.
Experience with XACTA 360, Continuum, and other SCAP-compliant tools.
Demonstrated experience with RMF, ICD 503, CNSSI 1253, NIST SP 800-53/53A, and STIGs.
Active TS/SCI clearance with polygraph.
U.S. citizenship required.

Nice To Haves

Certified Information Systems Security Professional (CISSP).
Certified Information Systems Auditor (CISA).
NIST Cybersecurity Framework (NCSF) certification.
AWS Solutions Architect Associate or Professional certification.

Responsibilities

Manage analysts responsible for protecting information system assets from intentional or inadvertent access or destruction.
Support a program, organization, system, or enclave.
Support Agency RMF workflow and processes by proposing, coordinating, implementing, and enforcing information system security policies, instructions, standards, and methodologies.
Coordinate with the Data Custodian, Project Owner, and ISSM to identify information types, assign security categorizations, determine information security and privacy impacts, and manage related risks.
Document controls in the information security and privacy plan or equivalent document to ensure they meet or exceed minimum CISO guidance controls.
Maintain current system information in XACTA, including points of contact and artifacts, to support organizational requirements and processes.
Evaluate the impact of network and system changes using RMF processes.
Ensure anomalies identified through information security continuous monitoring are addressed and remediated according to the risks they pose.
Recommend actions to stakeholders for system configuration deviations from the required baseline.
Develop and maintain a system security plan (SSP).
Conduct periodic reviews to ensure compliance with the SSP.
Ensure configuration management for security-relevant information system software, hardware, and firmware is maintained and documented.
Monitor system recovery processes to ensure security features and procedures are properly restored.
Ensure information system security documentation is current and accessible to authorized individuals.
Formally notify appropriate individuals when changes occur that might affect authorization.
Participate in governance and project reviews identified by the Sponsor.