Information Assurance Lead

GCyber; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Paid Parental Leave

401(k) Matching

Disability Insurance

Health Insurance (Company‑funded or co

Professional Development Plans

Commuter Benefits Plan

Parking and Transportation Allowance

Job summary

GCyber seeks an Information Assurance Lead to guide a mission-focused federal IT modernization effort in a classified environment. You will establish and lead the IA function, ensuring secure design, assessment, authorization, operation, and continuous improvement across cyber domains.

The role requires on-site presence in Washington, DC, with partial telework during early phases. You will mentor IA engineers, coordinate across teams, and drive security plans, risk analyses, and audit readiness

Qualifications

• Active TS/SCI security clearance
• DoD 8570/8140 IAT II certification (Security+, CCNA-Security, CND, CySA+, GICSP, GSEC, SSCP)
• Early-stage flexibility with partial telework during initial development phases
• Full-time on-site presence at secure facility in Washington, DC will be required as the program matures
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related discipline
• Twelve or more years of relevant experience; additional relevant experience may be considered in place of a degree
• Demonstrated experience leading cybersecurity or information assurance teams
• Experience with risk assessments, IT audits, security planning, system authorization, policy development, and compliance with federal and DoD requirements
• Working knowledge of network, cloud, application, endpoint, identity, encryption, vulnerability, logging, IDS/IPS, VPN, firewall, virtualization, and data‑protection controls
• Experience with Linux or UNIX and at least one scripting language

Responsibilities

• Lead and mentor IA engineers across applications, cloud, infrastructure, DevSecOps, test, operations, and customer teams
• Ensure secure design, configuration, maintenance, monitoring, documentation, and compliance with policies
• Lead security assessments, risk analyses, vulnerability management, and audit remediation
• Coordinate certification and authorization activities and ensure evidence is complete before deployment
• Integrate security controls into software development, CM, release, and operations lifecycles
• Monitor security posture, identify threats, and drive remediation and continuous improvement
• Develop and maintain security plans, policies, procedures, control evidence, and customer briefings
• Provide clear status on security risks, accreditation dependencies, vulnerabilities, remediation, and readiness

Skills

Leadership

Strategic planning

Written communication

Verbal communication

Cybersecurity

Risk assessment

IT audits

Policy development

Federal standards

Cross-team coordination

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related discipline

Tools

ServiceNow

Elastic

Kafka

AWS GovCloud

Red Hat

eMASS

RMF

NIST SP 800-53

STIGs

Linux/UNIX

Job description

GCyber is seeking an Information Assurance Lead, to help support a mission-focused federal IT modernization effort that is building and integrating secure digital capabilities in a classified environment. The program uses an Agile delivery model and a technology environment centered on ServiceNow, Elastic, AWS, Red Hat, and supporting integration technologies such as Kafka. The Information Assurance Lead will establish and lead the IA function, ensuring that systems are engineered, assessed, authorized, operated, and improved in accordance with customer, DoD, and federal security requirements.

As the Information Assurance Lead, you will

• Lead and mentor IA engineers and coordinate security work across application, cloud, infrastructure, DevSecOps, test, operations, and customer teams.
• Ensure information systems are securely designed, configured, maintained, monitored, documented, and compliant with applicable policies and standards.
• Lead security assessments, risk analyses, vulnerability management, audit preparation, and remediation tracking.
• Coordinate certification and authorization activities and ensure security requirements and evidence are complete before deployment.
• Integrate security controls into the software development, configuration management, release, and operational support lifecycles.
• Monitor security posture and system activity, identify threats or control weaknesses, and drive corrective action and continuous improvement.
• Develop and maintain security plans, policies, procedures, control evidence, risk decisions, and customer briefings.
• Provide clear status on security risks, accreditation dependencies, vulnerabilities, remediation, and operational readiness.

Minimum Requirements and Experience

• Active TS/SCI security clearance
• Ability to obtain and maintain any additional customer suitability approvals required for the position.
• DoD 8570/8140 IAT II certification (i.e., Security+, CCNA-Security, CND, CySA+, GICSP, GSEC, SSCP)
• Early-stage flexibility with partial telework during initial development phases
• Full-time on-site presence at secure facility in Washington, DC will be required as the program matures
• Strong written and verbal communication skills and the ability to work effectively across technical, operational, security, and customer teams.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related discipline
• Twelve or more years of relevant experience; additional relevant experience may be considered in place of a degree.
• Demonstrated experience leading cybersecurity or information assurance teams.
• Experience with risk assessments, IT audits, security planning, system authorization, policy development, and compliance with federal and DoD requirements.
• Working knowledge of network, cloud, application, endpoint, identity, encryption, vulnerability, logging, IDS/IPS, VPN, firewall, virtualization, and data‑protection controls.
• Experience with Linux or UNIX and at least one scripting language.

Preferred Qualifications

• Experience with RMF, NIST SP 800-53, STIGs, eMASS, continuous monitoring, POA&Ms, AWS GovCloud, IL5 or IL6 environments, and classified system authorization.
• Security leadership certification such as CISSP, CAP/CGRC, CISM, CASP+, or equivalent.
• Experience securing ServiceNow, Elastic, Kafka, Red Hat, cloud-native applications, data pipelines, or DevSecOps environments.

Our Benefits

GCyber is committed to the well‑being and development of every employee. Our benefits are designed to support your personal and professional goals, from health and wellness programs to retirement savings and career development opportunities. Highlights include:

• 26 Days of Paid Leave + Annual PTO Increase
• An extra day of paid leave for every year of employment with GCyber
• Paid Parental Leave
• Additional Leave Allowances for Military Duty, Jury Duty, and Bereavement Leave
• 401(k) Matching
• 100% Company‑funded Disability Insurance
• 90% Company‑Funded Health, Dental, and Vision Insurance, with contributions to insurance benefits for spouses, children, and family members
• Training and Professional Development Plans
• Commuter Benefits Plan
• Parking and Transportation Allowance

Equal Opportunity Employer

GCyber is an Equal Opportunity Employer. This means you don't have to worry about whether your application process will be fair. We consider all applicants without regard to race, color, religion, age, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, veteran status, or disability.

Stay in Touch

For future job notifications please follow GCyber on LinkedIn. https://linkedin.com/company/gcyber