Information System Security Officer

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

SSBI (T5)

Job Family:

Cyber Security

Job Qualifications:

Skills:

Information System Security, Information Technology Security, NIST 800-53, Risk Assessments, Vulnerability Assessments

Certifications:

None

Experience:

5 + years of related experience

US Citizenship Required:

No

Job Description:

GDIT is seeking an Information System Security Officer (ISSO) to join our team.

The ISSO is responsible for implementing and maintaining the security posture of assigned information systems.

The ISSO ensures systems are compliant with federal regulations, organizational policies, and industry best practices, primarily following the NIST Risk Management Framework (RMF) and associated standards.

HOW AN INFORMATION SYSTEM SECURITY OFFICER WILL MAKE AN IMPACT:

• Develop, maintain, and update System Security and Privacy Plans (SSPs), Plan of Action and Milestones, and other security documentation.

• Conduct regular system audits, vulnerability scans, and risk assessments.

• Ensure vulnerabilities are mitigated within defined timeframes.

• Implement and monitor security controls in accordance with NIST SP 800-171, NIST 800-53 and other Risk Management Framework.

• Support the Assessment & Authorization (A&A) process; assist in obtaining and maintaining system Authorization to Operate (ATO).

• Provide security guidance to system owners, developers, and administrators.

• Ensure daily, weekly, monthly, yearly continuous monitoring activities are conducted, including log reviews and incident response coordination improving detection and response time to incidents.

• Assist in responding to security incidents, investigations, and reporting.

• Ensure compliance with FISMA, FedRAMP (if cloud), or agency-specific security requirements.

• Conduct or coordinate security awareness training for users.

• Liaise with auditors, assessors, and internal/external stakeholders.

• Collaborate with cross-functional teams to ensure compliance with FISMA and organizational policies.

• Led yearly security training sessions to increase user awareness and reduce social engineering risks.

• Experience with securing AI, LLM.

WHAT YOU'LL NEED TO SUCCEED:

• Bachelor's degree in Cybersecurity, Computer Science, or related field (or equivalent experience).

• 5–7 years of experience in IT security or cybersecurity.

• Knowledge of NIST 800-53, 800-171, FISMA, and FedRAMP (as applicable).

• Experience with AWS security tools (e.g., GuardDuty, CloudTrail, CloudWatch, Macie).

• Security certification(s) such as CISSP or other security-related certifications.

 

DESIRED QUALIFICATIONS AND EXPERIENCE:

• Experience with Snowflake, Azure, Google, Databricks, Seekr, CrewAI.

GDIT IS YOUR PLACE:

• 401K with company match. 

• Customizable health benefits packages. 

• Internal mobility team dedicated to helping you own your career. 

• Challenging work that makes a real impact on the world around you. 

• Full-flex work week. 

#GDITFedHealthJobs

The likely salary range for this position is $94,350 - $127,650. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

Less than 10%

Telecommuting Options:

Remote

Work Location:

Any Location / Remote

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex w