Senior IT Risk & Compliance Leader - RMF & Cloud Security

General Dynamics - IT; Bossier City (LA); On-site; USD 140,000 - 180,000; Full time

Job summary

General Dynamics - IT is seeking a Principal-level IT Risk and Compliance Security Analyst to lead RMF governance, authorization, and continuous monitoring for federal programs across civilian and defense agencies. You will translate federal requirements into technical baselines, drive ATO readiness, and collaborate with engineers to maintain secure cloud architectures in AWS, Azure, and GCP.

In this senior role, you will produce SSPs and artifacts, guide risk decisions, review vulnerability

Qualifications

• Bachelor’s degree or 10+ years of enterprise IT/security experience.
• 8+ years of federal cybersecurity compliance experience.
• 4+ years as an ISSO or equivalent technical compliance role.
• Technical literacy across AWS, Azure, and/or GCP; ability to review architecture diagrams, infrastructure settings, and control outputs.
• Experience evaluating scan data from Qualys, Tenable/Nessus, CrowdStrike, Splunk.
• Direct experience applying DISA STIGs and SCAP content to system baselines.
• Active DoD 8570/8140 IAM Level III certification (e.g., CISSP, CISM, or GSLC).
• Ability to obtain and maintain a U.S. Government security clearance.

Responsibilities

• Lead RMF execution and Continuous Monitoring per NIST SP 800-37.
• Author and maintain SSPs, POA&Ms, SARs, ISCPs, and supporting authorization artifacts.
• Coordinate with SCAs and AOs during assessments and findings adjudication.
• Lead and sustain continuous monitoring through baseline reviews and periodic control assessments.
• Review vulnerability outputs and drive risk-based remediation with engineering.
• Assess IaC templates and cloud configurations against DISA STIGs and CIS Benchmarks.
• Review IAM, network ACLs, and cryptography implementations.
• Ensure automated compliance auditing and logging in delivery pipelines.
• Prepare for and respond to audits and compliance evaluations.
• Drive security-driven configuration changes and accreditation updates.

Skills

RMF knowledge

NIST SP 800-37

Multi-cloud security

CISSP/CISM/GSLC

GRC tools (Archer CSAM ServiceNow Xact

Vulnerability scanning

Kubernetes/Docker security

Cloud security architecture

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

Qualys

Tenable/Nessus

CrowdStrike

Splunk

Job description

General Dynamics - IT is seeking a Principal-level IT Risk and Compliance Security Analyst to lead RMF governance, authorization, and continuous monitoring for federal programs across civilian and defense agencies. You will translate federal requirements into technical baselines, drive ATO readiness, and collaborate with engineers to maintain secure cloud architectures in AWS, Azure, and GCP.

In this senior role, you will produce SSPs and artifacts, guide risk decisions, review vulnerability