RMF & Compliance Lead: Cybersecurity for VA Programs

General Dynamics Information Technology (GDIT); Austin (TX); Hybrid; USD 123,000 - 167,000; Full time

Benefits offered by this job

AI-enabled professional growth tools

Leadership development and internalmob

Competitive pay, benefits, and 401(k)

Mission-focused culture supportingVets

Opportunities to modernize VA cloud/IT

Job summary

General Dynamics Information Technology (GDIT) seeks a Security Compliance Lead to support the Department of Veterans Affairs in Austin, TX. You will manage RMF, A&A, POA&M, and audit readiness across IO, coordinating with system owners, engineers, and auditors to strengthen security across multiple systems.

The role emphasizes continuous improvement, documentation quality, and collaboration with hosting, database, cloud, and cybersecurity teams to ensure VA compliance and evolving security

Qualifications

• 5+ years of related experience in cybersecurity/compliance.
• Experience leading cybersecurity compliance, RMF, ISSO support, or A&A activities in enterprise IT environments
• Strong knowledge of NIST 800-53, RMF, POA&M management, SSP development, and audit readiness
• Understanding of ITSM, security operations, federal compliance frameworks, and enterprise governance
• Ability to evaluate cybersecurity documentation, authorization artifacts, risk analyses, vulnerability trends, and evidence for completeness, accuracy, and compliance
• Experience developing compliance plans, audit logs, dashboards, risk reports, POA&M packages, and corrective-action processes
• Excellent written, analytical, and stakeholder communication skills
• Ability to collaborate across cybersecurity, engineering, operations, audit, and federal organizations

Responsibilities

• Manage enterprise cybersecurity compliance activities across IO, ensuring RMF execution, A&A rigor, POA&M accuracy, audit readiness, and alignment with VA governance and federal security standards.
• Lead system authorization activities, maintain security documentation, oversee POA&M updates, coordinate continuous monitoring, validate SSPs and control evidence, and ensure vulnerability remediation cycles meet VA expectations.
• Work closely with System Owners, Authorizing Officials, cybersecurity teams, engineers, and auditors to strengthen security posture and maintain compliance across assigned systems and boundaries.
• Manage RMF workflows, compliance dashboards, audit preparation, scorecard reviews, and recurring reporting packages.
• Coordinate with hosting, database, application, cloud, and cybersecurity teams to ensure security compliance operations remain aligned, efficient, and collaborative.

Skills

Compliance Activities

Cybersecurity Compliance

Leadership

Education

Bachelor’s degree or equivalent

Job description

General Dynamics Information Technology (GDIT) seeks a Security Compliance Lead to support the Department of Veterans Affairs in Austin, TX. You will manage RMF, A&A, POA&M, and audit readiness across IO, coordinating with system owners, engineers, and auditors to strengthen security across multiple systems.

The role emphasizes continuous improvement, documentation quality, and collaboration with hosting, database, cloud, and cybersecurity teams to ensure VA compliance and evolving security