Divisional Chief Information Security Officer

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret/SCI

Clearance Level Must Be Able to Obtain:

Top Secret/SCI

Public Trust/Other Required:

None

Job Family:

Cyber Security

Job Qualifications:

Skills:

Cyber Defense, Cyber Incident Response, Security Standards

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

Yes

Job Description:

GDIT's Defense division is seeking a Divisional Chief Information Security Officer (D-CISO). This is a hybrid which requires three (3) days a week in the corporate office located in Falls Church, VA. 

The D-CISO is responsible for defining and leading the GDIT Defense Division Cyber Security program. The selected candidate will partners with GD, Defense customers, and other GDIT business units to ensure alignment with mission requirements as it relates to the ever-growing field of cyber security. The D-CISO will have oversight for all Cyber strategic planning and execution, providing guidance & standards to the Division programs within the Defense organization.  This role will have frequent engagement with GCIO Leaders, HQIT, Functional Business area representatives, Division CTOs and members of the ELT.

How the D-CISO will make an impact:

• Coordinate in scope cybersecurity and associated privacy activities across all the Defense sector contracts; as well as track improvements and ensure minimized risk profiles, etc.
• Directs the development and implementation of the GDIT Cyber Security Program
• Serve as a trusted advisor for Cyber Incidents and Incident Response affecting Defense Customers and/or Defense Division
• Serve as a trusted advisor to customers and DoD CISO’s across the Defense sector 
• In support of growth efforts, lead and/or support cybersecurity and AI solutions for proposal efforts across the Defense sector 
• Oversee the implementation, and enforcement of corporate and government information security standards (e.g., NIST 800-171) and procedures in alignment with GD, GDIT, and customer policies and requirements (e.g., DFARS, CMMC)
• Accountable and responsible for performing IT risk evaluations, participating in internal and external audits, performing in-depth security incident investigations, regulatory compliance projects, certifications, and overall information security reviews
• Works with GDIT Enterprise CISO as well as other executives to prioritize security initiatives and spending based on appropriate risk management
• Proactively identify and actively defend against security issues and potential threats, while continuously refining processes and system configurations to monitor and alert on threat activity while minimizing detrimental effect on the business
• Implementing a risk-based approach that provides adequate security between cyber risk mitigation and business results that are well integrated with GDIT’s other business risk management areas
• Collect, analyze, report and brief senior leadership on cyber security performance and risk.
• Advising Company executives and senior business leaders on cyber security decisions.
• Developing and promulgating Company cyber security policies, standards, and procedures

WHAT YOU'LL NEED TO SUCCEED:

• Education: Bachelor's Degree and 10+ years of related experience or equivalent combination of technical certifications and related work experience
• Required Experience: 10+ years of related experience
• Clearance: Active Top Secret/SCI clearance required to start
• US Citizenship
• Required Skills and Abilities: Experience managing a cyber-practice/cyber security program portfolio across multiple customer bases within the Defense market (and preferably across DOD customers as well)
• Experience leading cyber solutions for major government proposals / solicitations
• Demonstrable experience building and growing exceptional customer relationships.
• Expertise with government Authorization to Operate (ATO) OR Security Control Assessment (SCA) processes.
• Required Technical Skills: Strong technical understanding and abilities in both cyber security and data privacy
• Strong working knowledge of regulatory and statutory security requirements such as ISO 27001; NIST, DIACAP, DITSCAP, ICD-503 or equivalent
• Participates in special projects as required
• Location: On-Site Falls Church, Virginia

Preferred Certification(s):

• CISSP or equivalent professional certificat