Technical Lead Cybersecurity Operations

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

NACI (T1)

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Assessment & Authorization (A&A), Cloud Hosting, Cloud Infrastructure, Governance Risk Compliance (GRC), Risk Management Framework

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

No

Job Description:

Technical Lead Cybersecurity Operations

Advance your career while impacting security of our hosting environment as a Technical Lead Cybersecurity Operations at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

MEANINGFUL WORK AND PERSONAL IMPACT
As the Technical Lead Cybersecurity Operations, the work you’ll do at GDIT will be impactful to the mission of the customer. This program delivers critical hosting and storage solutions for NIH, HHS, and the VA, offering both secure public and private cloud options. The program provides architectural consulting, systems integration, and IT service management, with a strong focus on maintaining operational continuity and ensuring disaster recovery, aligned with federal cybersecurity requirements and strategic priorities. The Technical Lead Hosting platform will be responsible for providing leadership across both engineering and operational functions to deliver a unified hosting platform capability.

Bring your program management expertise along with a drive for innovation to GDIT. 

Responsibilities

• Lead Governance, Risk, and Compliance (GRC) activities, ensuring alignment with federal cybersecurity requirements and NIH/HHS policies across all supported systems.

• Oversee the full Risk Management Framework (RMF) lifecycle, including Assessment and Authorization (A&A) processes, ATO maintenance, and continuous monitoring activities.

• Provide independent validation and oversight of security controls implemented within hosting platform environments, ensuring separation from operational responsibilities under Task Area 2 (Integrated Hosting Platform)

• Manage and track Plans of Action and Milestones (POA&Ms), risk acceptance decisions, and remediation progress in coordination with system owners and stakeholders. Coordinate with the CIT Information Security Program (ISP), CISO, ISSOs, and system owners to ensure timely escalation, resolution, and reporting of security risks and incidents.

• Oversee vulnerability management reporting, metrics, and compliance dashboards, ensuring accurate tracking and alignment with NIH requirements. 

• Advise stakeholders on security policies, compliance requirements, and best practices, supporting implementation of federal guidance (e.g., NIST, 0MB, Zero Trust).

• Assist in planning, staging, and facilitating forums, working groups, and technical exchange meetings.

• Support security aspects of system acquisition and architecture reviews, including supply chain risk management and evaluation of new technologies.

• Provide cybersecurity support during audits and assessments ( e.g., GAO, internal reviews), including preparation of documentation, responses to findings, and remediation tracking.

• Assist in the planning, coordination, and execution of enterprise and external cybersecurity exercises and participate in internal and external cybersecurity exercises, as approved. Exercises shall not conflict with operational activities.

• Serve as the primary cybersecurity advisor to Government leadership, ensuring objective oversight and compliance across the hosting platform.

Qualifications

• Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field similar in size and scope referenced in this Call/Task Order. OR

• Experience: A minimum of ten (10) years of experience supporting cybersecurity programs within federal or large enterprise environments

• Certification: Possess an ITIL v3 or ITIL 4 Foundation and relevant certifications such as CISSP, CISM, or equivalent are preferred.

• Security clearance level: the ability to obtain a Public Trust

Skills

• Demonstrated expertise in Governance, Risk, and Compliance (GRC) functions, including Risk Management Framework (RMF), Assessment and Authorization (A&A), and continuous monitor