Senior Principal InfoSec Architect — ATO, GRC & Cloud

General Dynamics Information Technology, Inc.; Sterling (VA); On-site; USD 153,000 - 207,000; Full time

Job summary

General Dynamics Information Technology, Inc. is seeking an Information Security Analyst Sr Principal to lead support for ATO processes and security controls across federal systems.

You will contribute to risk management, documentation, and governance in a cloud and CSfC context. You will coordinate with federal officials to maintain ATO and ensure compliance with privacy regulations, performing audits and investigations as needed.

Qualifications

• 8+ years of related experience
• Active Secret clearance; Top Secret preferred
• US citizenship required
• Onsite role with travel ~10%

Responsibilities

• Categorizing information and system components
• Conducting Privacy Impact Assessments
• Developing risk management strategies
• Creating and maintaining security documentation
• Developing Security Control Implementation Statements
• Developing, tracking, and following up on POAMs
• Gathering information for security controls, policies, and processes
• Coordinating with Federal Government officials to obtain and maintain ATO
• Ensuring compliance with federal regulations and privacy requirements
• Investigating security violations and incidents
• Performing system audits and vulnerability assessments
• Participating in Change Management; collaborating with cross-functional teams

Skills

Assessment & Authorization (A&A)

Compliance Management

Information Assurance

Information Security

Risk Management

Education

Technical Training / Certification(s) or Degree

Tools

JCAM/Archangel/Xacta

Job description

General Dynamics Information Technology, Inc. is seeking an Information Security Analyst Sr Principal to lead support for ATO processes and security controls across federal systems.

You will contribute to risk management, documentation, and governance in a cloud and CSfC context. You will coordinate with federal officials to maintain ATO and ensure compliance with privacy regulations, performing audits and investigations as needed.