Senior Cybersecurity Risk & Compliance Advisor

General Dynamics Information Technology, Inc.; North Bethesda (MD); Hybrid; USD 166,000 - 224,000; Full time

Benefits offered by this job

Hybrid work arrangement

Competitive benefits package

Job summary

General Dynamics Information Technology, Inc. is seeking an experienced cybersecurity professional in Bethesda, MD to implement and oversee the Network Services Information Assurance Program.

You will standardize policies in line with NIH/HHS guidance, develop security documentation, and lead risk assessments and incident response efforts. The role requires 10+ years of related experience, extensive knowledge of NIST and Fed policies, and the ability to obtain/retain a Public Trust.

Qualifications

• Candidates must have a BS degree or equivalent experience and at least 10+ years related experience.
• In-depth knowledge of Federal security policies, standards, guidelines, and NIST frameworks.
• Experience in requirements analysis, mitigation and control implementation.

Responsibilities

• Implement the Network Services Information Assurance Program and ensure controls function correctly.
• Standardize templates, processes, and policies per NIH and HHS guidance.
• Lead development and maintenance of security documentation including POA&Ms and waivers.
• Conduct annual risk assessments, security impact analyses, and support incident response.
• Oversee ATO-related activities for Network Services and maintain SSPs, architecture diagrams, and data flows.
• Conduct continuous monitoring, vulnerability assessment, and compliance reviews.
• Collaborate with Technical SMEs to capture requirements and maintain security compliance.

Skills

Contingency Planning

FISMA Compliance

NIST Frameworks

Vulnerability Management

Security Certifications

10+ years experience

US Citizenship not required

Education

BS degree in Computer Science or Information Systems

Job description

General Dynamics Information Technology, Inc. is seeking an experienced cybersecurity professional in Bethesda, MD to implement and oversee the Network Services Information Assurance Program.

You will standardize policies in line with NIH/HHS guidance, develop security documentation, and lead risk assessments and incident response efforts. The role requires 10+ years of related experience, extensive knowledge of NIST and Fed policies, and the ability to obtain/retain a Public Trust.