ISSO)

General Dynamics Information Technology•International Falls, MN

4d•Onsite

About The Position

Transform technology into opportunity as an Information Security Analyst Advisor with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT, you’ll be at the forefront of innovation, playing a meaningful role in improving how agencies operate. At GDIT, people are our differentiator. As an Information Security Analyst Advisor, you will help ensure today is secure and tomorrow is smarter. Our mission depends on a dedicated professional who can perform the procedures necessary to safeguard information system assets and protect them from intentional or inadvertent access or destruction. You'll monitor, evaluate, and maintain the systems and procedures that protect internal information systems, networks, databases, and web-based environments. Are you a cybersecurity professional with a strong foundation in risk management and security compliance? GDIT is seeking a skilled candidate with ISSO or ISSM experience to support the cybersecurity posture of mission-critical systems. In this hybrid role, you will manage cybersecurity policies, assess risk, and ensure compliance with frameworks such as NIST 800-53 and the Risk Management Framework (RMF). Whether you’re looking to advance your career or take on greater responsibilities, this is an opportunity to contribute to a high-impact program in a collaborative, mission-driven environment.

Requirements

A minimum of 8 years of overall experience, with at least 4 years of specialized experience in:
Defining computer security requirements for high-level applications
Evaluating approved security product capabilities
Identifying and resolving computer security issues
Extensive experience with the Risk Management Framework (RMF) and hands-on use of eMASS & XACTA
Proven ability to review and analyze Assured Compliance Assessment Solution (ACAS) vulnerability scan results, validate findings, and support remediation efforts
Proficiency with Security Technical Implementation Guides (STIGs) and associated automation tools such as: SCAP STIG Viewer eMASSter
Strong technical foundation with familiarity in:
Virtualization technologies
Basic networking concepts
Cloud architecture and implementation
Industry cybersecurity best practices
Expert-level knowledge of cybersecurity principles, tools, and practices
In-depth understanding of Federal and DoD cybersecurity regulations and policies
US Citizenship Required
DoDD 8570.01M Information Assurance Manager level III baseline certification required.
TESA eligibility/certification required.
Clearance: Top Secret

Responsibilities

Manage the secure development and authorization of new USAFE-AFAFRICA systems, from inception to full operational capability, leveraging NIST security frameworks.
Serve as the primary cybersecurity point of contact for USAFE-AFAFRICA systems, ensuring compliance with security policies, procedures, and regulations while providing timely updates on threats, risks, and authorization status to stakeholders.
Perform all necessary procedures to protect information system assets, including overseeing the accreditation and certification of USAFE-AFAFRICA systems in accordance with DoD, Intelligence Community, and agency-specific requirements.
Prepare and submit System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and risk assessment documentation; collaborate with Authorizing Officials (AOs) to achieve and maintain Authorization to Operate (ATO) status.
Conduct regular reviews of DISA STIGs, analyze ACAS vulnerability scans, and provide remediation feedback to maintain compliance and support continuous monitoring under RMF.
Develop and recommend policies and procedures to ensure information system reliability, availability, and security; perform security evaluations, audits, and reviews to identify vulnerabilities and mitigate risks.
Create and maintain RMF control family documentation and ensure adherence to established procedures.
Recommend and implement training programs to educate users on cybersecurity policies and procedures; participate in network and system design to ensure appropriate security controls are integrated from the start.
Ensure the rigorous application of information security policies, principles, and practices across all IT services.
Perform ISSM duties as defined in AFMAN 17-101 and DoDI 8510.01 for assigned systems and applications.
Stay current with applicable DoD and NIST RMF publications, including NIST 800-53, 800-60, 800-37, and DoDI 8540.01.