JMSC-IP Information Technology (IT) and Cyber Risk Auditor – TS/SCI Required

General Dynamics Information Technology•Mililani, HI

1d•$81,349 - $103,500•Onsite

About The Position

IT AND CYBER RISK AUDITOR Advance your career while impacting our national security in cyber as an IT and Cyber Risk Auditor with GDIT at the Joint Multinational Simulation Center - Indo Pacific, the Pacific's premier simulation complex. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. MEANINGFUL WORK AND PERSONAL IMPACT: Support RMF-based cybersecurity risk management for training enclaves and exercise networks in accordance with Department of Defense and U.S. Army policies, vulnerability management, POA&M tracking, and continuous monitoring. Assist with implementation and documentation of RMF in accordance with Department of Defense and U.S. Army policies, control implementation and assessment support. Maintain and update RMF artifacts in Enterprise Mission Assurance Support Service (eMASS) to ensure compliance with Department of Defense cybersecurity requirements and support Authorization to Operate (ATO) processes. Update and document Security Technical Implementation Guide (STIG) compliance in response to vulnerabilities identified during assessments, audits, and inspections, ensuring alignment with Defense Information Systems Agency and Department of Defense cybersecurity standards. Ensure cybersecurity compliance with Department of Defense directives (DoD 8140, 8570.01-M), U.S. Army regulation AR 25-2, and NIST SP 800-53 / NIST SP 800-39, while incorporating guidance from U.S. Army Pacific CSPMO, U.S. Army Network Enterprise Technology Command, and United States Cyber Command Support the preparation of RMF artifacts, trackers, and supporting documentation required for Security Control Assessment Validation (SCA-V) activities to maintain the U.S. Army Pacific Type ATO. Assist with audits, vulnerability assessments, and cybersecurity inspections, documenting findings and supporting remediation in accordance with Department of Defense and U.S. Army cybersecurity policies. Perform other cybersecurity duties as required to support RMF compliance, continuous monitoring, and mission assurance in alignment with Department of Defense and U.S. Army standards. WHAT YOU’LL NEED TO SUCCEED: Education: BS/BA in Cyber Security, Information Security or Computer Science or a related technical discipline, or the equivalent combination of education, technical training, or work experience GDIT IS YOUR PLACE: At GDIT, the mission is our purpose, and our people are at the center of everything we do. Growth: AI-powered career tool that identifies career steps and learning opportunities Support: An internal mobility team focused on helping you achieve your career goals Rewards: 401K with company match Community: Award-winning culture of innovation and a military-friendly workplace OWN YOUR OPPORTUNITY Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.

Requirements

2+ years of related experience
Competent with eMASS
Solid knowledge of the SCA-V process and inspection program
Understanding of NIST, DoD, & Army Cybersecurity & Risk Management Framework policies, directives, instructions, manuals, and best business practices
SecurityX (CASP+) and/or SEC+ is required
Knowledge of current industry methods for evaluating, implementing, and disseminating IT security assessment, monitoring, detection and remediation tools and procedures utilizing standards-based concepts and capabilities
Basic understanding of disaster recovery continuity of operations plans
Basic understanding of enterprise incident response program, roles, and responsibilities
Knowledge of network security architecture concepts
Knowledge of server administration and systems engineering theories, concepts, and methods
Experience with VMWare environments
Experience with vulnerability assessment tools
TS/SCI

Nice To Haves

Military and MTC experience preferred

Responsibilities

Support RMF-based cybersecurity risk management for training enclaves and exercise networks in accordance with Department of Defense and U.S. Army policies, vulnerability management, POA&M tracking, and continuous monitoring.
Assist with implementation and documentation of RMF in accordance with Department of Defense and U.S. Army policies, control implementation and assessment support.
Maintain and update RMF artifacts in Enterprise Mission Assurance Support Service (eMASS) to ensure compliance with Department of Defense cybersecurity requirements and support Authorization to Operate (ATO) processes.
Update and document Security Technical Implementation Guide (STIG) compliance in response to vulnerabilities identified during assessments, audits, and inspections, ensuring alignment with Defense Information Systems Agency and Department of Defense cybersecurity standards.
Ensure cybersecurity compliance with Department of Defense directives (DoD 8140, 8570.01-M), U.S. Army regulation AR 25-2, and NIST SP 800-53 / NIST SP 800-39, while incorporating guidance from U.S. Army Pacific CSPMO, U.S. Army Network Enterprise Technology Command, and United States Cyber Command
Support the preparation of RMF artifacts, trackers, and supporting documentation required for Security Control Assessment Validation (SCA-V) activities to maintain the U.S. Army Pacific Type ATO.
Assist with audits, vulnerability assessments, and cybersecurity inspections, documenting findings and supporting remediation in accordance with Department of Defense and U.S. Army cybersecurity policies.
Perform other cybersecurity duties as required to support RMF compliance, continuous monitoring, and mission assurance in alignment with Department of Defense and U.S. Army standards.

Benefits

401K with company match
variety of medical plan options, some with Health Savings Accounts
dental plan options
a vision plan
full flex work weeks where possible
a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
short and long-term disability benefits
life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume