Cyber Compliance Officer

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Secret

Suitability:

Public Trust/Other Required:

None

Job Family:

Cyber Security

Job Qualifications:

Skills:

Cyber Defense, Cybersecurity, Enterprise IT, Information Assurance, Information Technology (IT)

Certifications:

Security CE + - Comptia CERT

Experience:

4 + years of related experience

US Citizenship Required:

Yes

Job Description:

We are GDIT. We stay at the forefront of innovation to solve complex technical challenges.

GDIT is your place. Make it your own by discovering new ways to apply the latest technologies securely and expertly. Own your opportunity at GDIT and you’ll be a meaningful part of improving how agencies operate. Our work depends on a Cyber Compliance Officer joining our team to support Guard Enterprise Cyber Operations Support (GECOS) program in Falls Church, VA.

At GDIT, we foster a people-centric environment. As a Cyber Compliance Officer, you will support compliance through performing security services in accordance with applicable DoD and Army cybersecurity guidance and regulations.

This is an IT Service Management contract in support of the operation, modernization, expansion, and further evolution of the ARNG’s global Information Technology (IT) services including networking, compute, storage, infrastructure, applications, hosting, and program management services.  The GECOS program supports the ARNG enterprise IT infrastructure, its Wide Area Network (WAN), authentication and directory services, cybersecurity, application hosting, and associated services. GECOS uses ITIL best practices framework as the basis for IT Service Management (ITSM) model.

To be successful in this position you need to be collaborative and willing to work within a team. While you will need to be a self-starter completing tasks on your own, working together is critical in this role. You will be interfacing with the client and senior staff. Therefore, you should be articulate in your communications because your opinion matters. You will need to explain technical intricacies in a way that is easily understood.

The work includes the following:

• Providing RMF support to the 54 supported organizations (i.e., 50 states, three territories, and the District of Columbia) Installation Campus Area Networks (ICANs) and HQ Enterprise investments where applicable. This support includes eMASS system record reviews.
• Provide RMF SME support to the 54 in the form of customer training and briefs, managing multiple states simultaneously and briefing the Program Information System Security Manager (P-ISSM) on progress, hurdles, and roadblocks as they arise.
• Providing RMF Support to the 54 for Steps 0 – 3, 5 & 6:
  • Step 0 – providing customer(s) with RMF SME Roles & Responsibilities training.
  • Step 1 – Providing customers with guidance on how to execute the categorization of their system / ICAN
  • Step 2 – Providing customers with guidance on how to choose the security control baseline for their system / ICAN
  • Step 3 – Providing customers guidance on how to conduct security control implementation and delegating technology areas in eMASS
  • Step 5 – Supporting submission of ATO package artifacts to the Authorizing Official for ATO / risk recommendations
  • Step 6 – Support customer in enabling strategies and following guidance to execute continuous monitoring (ConMon) responsibilities.
• Maintaining Supporting cybersecurity compliance requirement identification to follow regulatory guidance for IT investments of the 54 and the DoDIN-A(NG) and DoDIN-A(NG)-S networks and computing services.
• Ensure the 54 are adhering to all Department of Defense (DoD) enterprise security requirements to include those required by the Defense Information Systems Agency (DISA) and the Department of the Army (DA); prepping for and passing Command Cyber Readiness Inspections (CCRIs), obtaining and maintaining Authority to Connect (ATC) and Authority to Operate (ATO) from the Designated Approving Authority (DAA); ensuring compliance with all Secure Technical Implementation Guides (STIGS) and required information assurance (IA) controls.
• Ensuring that the 54 comply with Army directives and mandates and are in keeping with the future Joint Information Environment (JIE) architecture.

The Cyber Compliance Officer will:

• Measures ARNG compliance with cybersecurity requirements and recommends