ISSM: RMF & STIGs Security Lead

General Dynamics Information Technology; McLean (VA); On-site; USD 123,000 - 167,000; Full time

Benefits offered by this job

401K with company match

Health and wellness packages

Internal mobility support

Paid education and certifications

Job summary

General Dynamics Information Technology (GDIT) is seeking an Information Systems Security Manager (ISSM) in McLean, VA, to lead RMF-based security operations and risk management. The role requires TS/SCI with active polygraph, a Security+ or equivalent certification, and 4+ years of related experience.

You will manage A&A processes, coordinate with stakeholders, and ensure SSPs and security documentation are current.

Qualifications

• Bachelor's degree in a related field.
• Security+ certification required.
• 4+ years of related experience.
• Demonstrated RMF, STIGs, Xacta and NIST/IN references.
• Experience with ServiceNow and vulnerability tools.

Responsibilities

• Support RMF workflow and processes, enforce security policies and standards.
• Review access requests and authorizations.
• Maintain system information in ServiceNow; evaluate changes.
• Manage multiple A&A projects from concept to ATO.
• Coordinate with stakeholders on mitigating vulnerabilities.
• Propose configurations deviations from baselines when needed.
• Conduct periodic SSP reviews and maintain documentation.
• Ensure security systems are recovered and documented.

Skills

RMF

STIGs

Xacta

Education

Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or related

Tools

ServiceNow

Tenable

SCAP Tools

Job description

General Dynamics Information Technology (GDIT) is seeking an Information Systems Security Manager (ISSM) in McLean, VA, to lead RMF-based security operations and risk management. The role requires TS/SCI with active polygraph, a Security+ or equivalent certification, and 4+ years of related experience.

You will manage A&A processes, coordinate with stakeholders, and ensure SSPs and security documentation are current.