JMSC-IP Information Technology (IT) and Cyber Risk Auditor Associate – TS/S at General Dynamics Information Technology

Mililani, Hawaii, United States -

Full Time

Start Date

Immediate

Expiry Date

19 Jun, 26

Salary

94300.0

Posted On

21 Mar, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, Information Assurance, Information Security, VMware, eMASS, SCA-V Process, NIST SP 800-53, NIST SP 800-39, DoD Directives, RMF, Vulnerability Management, POA&M Tracking, Continuous Monitoring, STIG Compliance, Solarwinds, Network Security Architecture

Industry

IT Services and IT Consulting

Description

Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret/SCI Clearance Level Must Be Able to Obtain: Top Secret/SCI Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Job Qualifications: Skills: Cybersecurity, Information Assurance, Information Security, VMware Certifications: None Experience: 4 + years of related experience US Citizenship Required: Yes Job Description: IT AND CYBER RISK AUDITOR ASSOCIATE Advance your career while impacting our national security in cyber as an IT and Cyber Risk Auditor Associate at at the Joint Multinational Simulation Center - Indo Pacific, the Pacific’s premier simulation complex. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. MEANINGFUL WORK AND PERSONAL IMPACT: Support cybersecurity risk management activities for training enclaves and exercise networks Assist with implementation and documentation of the Risk Management Framework (RMF) in accordance with Department of Defense and U.S. Army policies, control implementation and assessment support Support RMF-based cybersecurity risk management for training enclaves and exercise networks in accordance with Department of Defense (DoD) and U.S. Army policies, vulnerability management, POA&M tracking, and continuous monitoring Maintain and update RMF artifacts in Enterprise Mission Assurance Support Service (eMASS) to ensure compliance with DoD cybersecurity requirements and support Authorization to Operate (ATO) processes Ensure cybersecurity compliance with DoD directives (DoD 8140, 8570.01-M), U.S. Army regulation AR 25-2, and NIST SP 800-53 / NIST SP 800-39, while incorporating guidance from USARPAC CSPMO, U.S. Army Network Enterprise Technology Command, and United States Cyber Command Update and document Security Technical Implementation Guide (STIG) compliance in response to vulnerabilities identified during assessments, audits, and inspections, ensuring alignment with Defense Information Systems Agency and Department of Defense cybersecurity standards Support the preparation of RMF artifacts, trackers, and supporting documentation required for Security Control Assessment Validation (SCA-V) activities to maintain the U.S. Army Pacific Type ATO Assists with audits, vulnerability assessments, and cybersecurity inspections documenting findings and supporting remediation in accordance with Department of Defense and U.S. Army cybersecurity policies Performs other cybersecurity duties as required to support RMF compliance, continuous monitoring, and mission assurance in alignment with Department of Defense and U.S. Army standards WHAT YOU’LL NEED TO SUCCEED: Education: BS/BA in Cyber Security, Information Security or Computer Science or a related technical discipline, or the equivalent combination of education, technical training, or work experience Required Experience: 4 years of related experience; Military and MTC experience preferred Required Technical Skills: Competent with eMASS Solid knowledge of the SCA-V process and inspection program Understanding of NIST, DoD, & Army Cybersecurity & Risk Management Framework policies, directives, instructions, manuals, and best business practices Certification: SecurityX (CASP+) and/or SEC+ is required Security Clearance Level: TS/SCI Required Skills and Abilities: Knowledge of current industry methods for evaluating, implementing, and disseminating IT security assessment, monitoring, detection and remediation tools and procedures utilizing standards-based concepts and capabilities Basic understanding of disaster recovery continuity of operations plans Basic understanding of enterprise incident response program, roles, and responsibilities Knowledge of network security architecture concepts Knowledge of server administration and systems engineering theories, concepts, and methods Experience with VMWare environments Experience with Solarwinds or similar discovery and analysis tools Experience with vulnerability assessment tools Location: On Customer Site GDIT IS YOUR PLACE: At GDIT, the mission is our purpose, and our people are at the center of everything we do. Growth: AI-powered career tool that identifies career steps and learning opportunities Support: An internal mobility team focused on helping you achieve your career goals Rewards: 401K with company match Community: Award-winning culture of innovation and a military-friendly workplace OWN YOUR OPPORTUNITY Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters. The likely salary range for this position is $69,700 - $94,300. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: Less than 10% Telecommuting Options: Onsite Work Location: USA HI Schofield Additional Work Locations: Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Join our 30,000 everyday heroes. We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. For more information about GDIT's Privacy Policy, click here: https://www.gdit.com/privacy-policy/notices/

Responsibilities

The associate will support cybersecurity risk management activities for training enclaves and exercise networks, assisting with the implementation and documentation of the Risk Management Framework (RMF) according to DoD and U.S. Army policies. Key duties include maintaining RMF artifacts in eMASS, ensuring compliance with DoD directives, and supporting Security Control Assessment Validation (SCA-V) activities.