Information Security Analyst - VA A&A

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

MBI (T2)

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Assessment and Authorization (A&A), Information System Security, Veterans Affairs

Certifications:

None

Experience:

5 + years of related experience

US Citizenship Required:

No

Job Description:

Join GDIT where your work will improve outcomes for our Veterans. You will support the Department of Veterans Affairs (VA) with a Veteran first vision to transform the Veterans Benefits Administration (VBA) with greater visibility into claims processing. Together, we’re building a future of fast, transparent claims, empowered teams, and striving for a zero backlog, directly supporting Veterans and making a real impact on the lives of those who served. This high-impact solution accelerates the delivery of benefits to Veterans and their families.

In this role, you will lead security efforts across systems that process sensitive data at scale, ensuring continuous compliance with federal cybersecurity frameworks and regulations. 

Responsibilities: 

• Supports the Information System Security Officer (ISSO) for Department of Veterans Affairs (VA) systems. 

• Support the full Risk Management Framework (RMF) lifecycle and Assessment & Authorization (A&A) activities. 

• Develop and maintain security documentation, including SSP, POA&M, SAR, and Security Control Traceability Matrices. 

• Implement and monitor compliance with NIST SP 800-53, FedRAMP, FISMA, and agency-specific policies. 

• Support security audits, inspections, and incident response activities. 

• Collaborate closely with DevSecOps, Cloud Engineering, and application teams to integrate security into infrastructure and development lifecycles. 

Requirements: 

• Bachelor’s degree in Cybersecurity, Information Systems, or related field. 

• 5+ years of experience in information assurance or cybersecurity roles. 

• Deep knowledge of NIST SP 800-53, FedRAMP, FISMA, and related federal cybersecurity frameworks. 

• Hands-on experience with RMF, vulnerability scanning tools (e.g., Nessus, Qualys), and SIEM platforms. 

• Familiarity with cloud security (preferably AWS) and DevSecOps pipelines. 

• Must be able to obtain a Position of Trust and successfully pass a thorough Government background screening process requiring the completion of detailed forms and fingerprinting  

Preferred:

• Experience with VA A&A processes

• CRISC or CGRC certification

Why GDIT: 

• Mission-Driven Work: Directly support Veterans and public service outcomes. 

• Technology-Forward: Work with modern cloud-native, AI-enabled environments. 

• Career Growth: Access ongoing training, certifications, and advancement opportunities. 

• Flexibility: Remote options, work-life balance, and a supportive culture. 

• Competitive Pay & Benefits: Salary, healthcare, retirement, paid time off, and more. 

#Veteran_First<