Security Compliance Analyst

General Dynamics Information Technology•USA DC Home Office (DCHOME), DC

22h•$96,569 - $130,651•Remote

About The Position

GDIT is seeking a Security & Compliance Analyst to join the Case Management Modernization (CMM) Data Modernization and Governance team. This program aims to develop a modern cloud-based solution for over 204 federal courts across the United States. The analyst will be responsible for delivering integrated data governance, engineering, data platform, reporting, analytics, and AI/ML capabilities. This role requires 24/7 supplemental monitoring, rapid escalation of critical issues within 30 minutes, and monthly incident/problem reporting to ensure compliance and responsiveness during and after releases. The Security & Compliance Analyst will define data privacy, security, retention, and classification rules, and manage data classification, sensitive data governance, and data sharing agreements.

Requirements

BS/BA degree with 5+ years of experience of general experience in information systems providing enterprise cybersecurity through policy, architecture, and training processes.
Experience developing plans to safeguard sensitive data against accidental or unauthorized modification, destruction, or disclosure.
Experience working with Agile teams and SAFe, responding to security assessments, and providing oversight of vulnerability audits and assessments.
Experience using tools to detect cloud-based security issues (1-2+ years' experience).
Exposure to SIEM tools such as Splunk for monitoring and log analysis (1-2+ years' experience).
Prior experience performing incident response and forensics (1-2+ years' experience).
Knowledge of modern security methods, vulnerabilities, and emerging threats.
Experience with software and security testing, including containerized applications.
Understanding of data privacy, retention, and classification requirements in a regulated environment.
Familiarity with data governance, metadata management, and data quality practices.
Experience with SQL for data querying and validation.
Proficiency with BI/reporting tools such as Power BI, Tableau, or QuickSight.
Strong analytical, problem‑solving, & statistical analysis skills with attention to detail and data accuracy.
Excellent presentation and communication (oral and written) skills.
Consultant mindset with the ability to work with high level customer stakeholders and build excellent customer relationships.
Experience identifying and applying industry tools, solutions, methods best practices, and emerging technologies.
Strong analytical skills and problem-solving skills with the ability to formulate and communicate recommendations for improvement.
Demonstrated ability to work effectively, independently, and as part of a team.
Strong compliance mindset, with the ability to translate security and privacy requirements into clear governance guidance for stakeholders and leadership.

Nice To Haves

Experience may be considered in lieu of degree.
Familiarity with statistical analysis tools/techniques (e.g., Excel, R, Python) preferred.
Experience with cloud data platforms (Snowflake, Databricks, AWS preferred).
Understanding of data architecture concepts (data lake, lakehouse, warehouse).
Certified Information Systems Security Professional (CISSP).

Responsibilities

Support analysis of systems, programs, and/or planning activities across the CMM operational environment.
Perform research in support of policies, procedures, and other technical documentation, and support analysis of IA/Cyber-related programs and initiatives.
Research and analyze options to develop relationships and solutions that resolve problems within the specialty area.
Analyze information assurance-related technical problems and provide engineering and technical support in solving them.
Design, develop, engineer, and implement solutions that meet network security requirements.
Perform vulnerability and risk analyses of computer systems and applications during all phases of the system development life cycle.
Establish and satisfy complex system-wide information security requirements based on the analysis of user, policy, regulatory, and resource demands.
Support customers in the development and implementation of security policies.
Provide 24/7 supplemental monitoring of the operational environment and escalate critical, service-impacting issues within 30 minutes.
Prepare monthly incident and problem management reports, ensuring operations remain compliant and responsive during and after releases.
Define data privacy, security, retention, and classification rules; manage data classification, sensitive data governance, and data sharing agreements.
Support Authority to Operate (ATO) documentation and gather supporting artifacts for ATO packages.
Monitor performance scans and system logs, analyzing and reporting vulnerabilities.
Investigate and analyze security issues and incidents, leveraging SIEM tools for monitoring and log analysis.
Maintain awareness of emerging security threats and modern attack methods to inform monitoring and response activities.

Benefits

Variety of medical plan options, some with Health Savings Accounts
Dental plan options
Vision plan
401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
Full flex work weeks where possible
Variety of paid time off plans, including vacation, sick and personal time, holidays
Paid parental, military, bereavement and jury duty leave
15 days of paid leave per calendar year to be used for vacations, personal business, and illness
10 paid holidays per year
Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees
Short and long-term disability benefits
Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance