GDIT is seeking a Transport Security & Information Assurance Manager to help support our JSP Enterprise Transport Management (ETM) contract at the Pentagon in Arlington, VA. Due to the nature of work this role entails, telecommuting is not allowed and will require the employee to report full-time onsite.
The ideal candidate will manage IT Security Program involving services to include cybersecurity operations, continuous monitoring, security information and event management, security architecture, security engineering, vulnerability scanning, endpoint security, security analytics, network access control, penetration testing, data forensics, security data ingestion and analysis, incident analysis, threat monitoring/hunt and security situational awareness.
Responsibilities include but are not limited to:
Manages cybersecurity activities across the enterprise and assist with security policies.
Supervise the assembly and review of security assessment and authorization (A&A) documentation in support of Risk Management Framework.
Support briefings, meetings and communicate recommendations and contract status.
Manage the scope, schedule, and resource allocation for projects and sustaining activities.
Support development of policies, strategies, and communications relative to cybersecurity.
Gather and report on security metrics that demonstrate the relative cost/benefit of the security operations and other cybersecurity initiatives.
Track the development of Plan of Action and Milestones (POA&Ms) supporting the mitigation of IT security weaknesses and vulnerabilities and support FISMA reporting.
Oversee the preparation and maintenance of security architecture documents that establish the operational, system and technical views of the security architecture.
Manage detailed assessments of the defensive posture of the network environment.
Maintain cyber situational awareness of the cyber threat landscape and maintain threat monitoring services.
Ensure cybersecurity policies, procedures, and standards documentation is accurate, current, and relevant.
Provide enterprise cybersecurity program management support.
Meet security audit mandates, standards, and requirements.
Effectively manage, monitor, and communicate enterprise security risk by maintaining visibility across the agency enterprise.
Reduce cost and optimize enterprise cybersecurity posture through efficiencies, reciprocity, security shared services, and automation.
Effectively communicate and collaborate with internal and external key stakeholders
Active Top Secret clearance with SCI Eligibility
Current IAT Level III certification (CISSP or CASP)
Bachelors Degree in related field
12 years of computer information technology experience.
5 years supervising IT security activities
Experience in resolving issues and scheduling conflicts and solving complex problems
Excellent listening skills and communication skills include oral, written, and formal presentations
COVID-19 Vaccination Requirement: To protect the health and safety of its employees and to comply with customer requirements, GDIT may require employees in certain positions to be fully vaccinated against COVID-19. Vaccination requirements will depend on the status of the federal contractor mandate and customer site requirements.
We are GDIT. The people supporting some of the most complex government, defense, and intelligence projects across the country. We deliver. Bringing the expertise needed to understand and advance critical missions. We transform. Shifting the ways clients invest in, integrate, and innovate technology solutions. We ensure today is safe and tomorrow is smarter. We are there. On the ground, beside our clients, in the lab, and everywhere in between. Offering the technology transformations, strategy, and mission services needed to get the job done.
GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.