Information Systems Security Manager - Cross-Domain Solutions (CDS)

Type of Requisition:
Regular

Clearance Level Must Currently Possess:
Top Secret

Clearance Level Must Be Able to Obtain:
Top Secret

Public Trust/Other Required:
None

Job Family:
Information Security

Job Qualifications:

Skills:
Assessment and Authorization (A&A), Information System Security, Risk Management, Vulnerability Management
Certifications:
None
Experience:
5 years of related experience
ship Required:
Yes

Job Description:

Transform technology into opportunity as an Information Systems Security Manager. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you'll be at the forefront of innovation and play a meaningful part in improving how agencies operate.

At GDIT, people are our differentiator. As an Information Security Systems Security Manager, you will help ensure today is safe and tomorrow is smarter. Our work depends on the Information Security Analyst Advisor joining our team to perform all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Monitor, evaluate, and maintain systems and procedures to safeguard internal information systems, networks, databases, and Web-based security.

Job Description

• Serve as the primary cyber security point of contact for Cross Domain Solution (CDS) systems, ensuring compliance with security policies, procedures, and regulations, and providing timely dissemination of threats, risk, and authorization status to stakeholders.
• Perform all necessary procedures to ensure the safety of information systems assets, including overseeing the accreditation and certification of CDS systems in accordance with DoD, Intelligence Community, and agency-specific requirements.
• Stays up to date on the capabilities of Cross Domain (CD) services offered by the enterprise, including the CDS baseline list and the CD technologies portfolio, and informs the UCDSMO of any gaps or deficiencies in these capabilities
• Prepare and submit System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and risk assessment documents, and collaborate with Authorizing Officials (AOs) to achieve and maintain Authorization to Operate (ATO) status.
• Conduct regular reviews of DISA STIGs, ACAS vulnerability scans, and provide remediation feedback to ensure compliance and implement RMF continuous monitoring efforts.
• Develop and recommend policies and procedures to ensure information systems reliability, accessibility, and security, and conduct systems security evaluations, audits, and reviews to identify vulnerabilities and risks.
• Develop RMF Control Family plans and procedures and ensure overall adherence to these plans and procedures.
• Recommend and implement programs to educate systems, network, and data users on systems security policies and procedures, and participate in network and systems design to ensure implementation of appropriate security policies.
• Ensure the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services. Perform ISSM duties as outlined in AFMAN 17-01 and DoDI 8510.01 for assigned systems/applications.
• Maintain familiarity with relevant DOD/NIST RMF publications, including NIST 800-53, 800-60, 800-37, DODI 8540.01 CDS Policy, and DOD Directive 5144.02.

WHAT YOU'LL NEED TO SUCCEED:

Education:

A Bachelor's degree in computer science/systems, information systems/ technology, engineering/engineering technology, software engineering/programming, management, natural sciences, social sciences, mathematics, or business/finance is required.

Required Experience:

This position requires a minimum of five years' specialized experience in defining computer security requirements for high level applications, evaluation of approved security product capabilities and resolution of computer security problems.

• Extensive knowledge and proficiency with the Risk Management Framework (RMF) and eMASS or XACTA experience.
• Extensive knowledge and proficiency with the Assured Compliance Assessment Solution (ACAS) Vulnerability Scanner
• Extensive knowledge and proficiency with the Security Technical Implementation Guide (STIG) implementation and automation tools such as SCAP, STIG Viewer, eMASSter which are often leveraged for automation.
• A strong technical background, ideal candidates must have familiarity in virtualization technologies, basic networking and industry best practices.
• Expert knowledge and proficiency with Cybersecurity best practices.
• Expert knowledge and understanding of Federal and DoD Cybersecurity regulations and policies.

Certifications & Training:

• DoD 8570/8140 IAM Level III Certification (e.g., CISSP, CISM, or GSLC).
• eMASS Training (can be obtained after hire)

Clearance: Top Secret

#DefenseOCONUS

GDIT IS YOUR PLACE:

401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from
Rest and recharge with paid vacation and holidays

The likely salary range for this position is $93,500 - $126,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Total compensation for international positions varies by tax, social security, and immigration statuses, as well as location. Generally, an international assignment may include allowances, premium uplifts, and/or relocation or transportation benefits, above base salary range noted.

Scheduled Weekly Hours:
40

Travel Required:
Less than 10%

Telecommuting Options:
Onsite

Work Location:
International

Additional Work Locations:

Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.

We connect people with the most impactful client missions, creating an unparalleled work experience that allows them to see their impact every day. We create opportunities for our people to lead and learn simultaneously. From securing our nation's most sensitive systems, to enabling digital transformation and cloud adoption, our people are the ones who make change real.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.