Compliance Officer

Cyber Compliance OfficerWe are GDIT. We stay at the forefront of innovation to solve complex technical challenges. GDIT is your place—make it your own by discovering new ways to apply the latest technologies securely and expertly. Our work depends on a Cyber Compliance Officer joining our team to support the Guard Enterprise Cyber Operations Support (GECOS) program in Falls Church, VA.This is an IT Service Management (ITSM) contract supporting the operation, modernization, expansion, and evolution of the Army National Guard's (ARNG) global IT services, including networking, compute, storage, infrastructure, applications, hosting, and program management. The GECOS program supports the ARNG enterprise IT infrastructure, its WAN, authentication and directory services, cybersecurity, application hosting, and associated services, leveraging ITIL best practices.As a Cyber Compliance Officer, you will provide cybersecurity compliance support in accordance with applicable DoD and Army guidance and regulations. You will work closely with the client and senior staff, so clear, articulate communication is essential. You must be collaborative and able to work within a team, while also being a self-starter who can complete tasks independently and explain complex technical information in an easily understood manner.ResponsibilitiesThe Cyber Compliance Officer will:Provide Risk Management Framework (RMF) support to the 54 supported organizations (50 states, three territories, and the District of Columbia) for Installation Campus Area Networks (ICANs) and HQ Enterprise investments, including eMASS record reviews.Serve as an RMF SME to the 54, delivering customer training and briefs, managing multiple states simultaneously, and briefing the Program Information System Security Manager (P-ISSM) on progress, hurdles, and roadblocks.Provide RMF support for Steps 0–3, 5, and 6:Step 0: Deliver RMF roles and responsibilities training.Step 1: Guide system/ICAN categorization.Step 2: Guide security control baseline selection.Step 3: Advise on security control implementation and delegation of technology areas in eMASS.Step 5: Support submission of ATO package artifacts to the Authorizing Official.Step 6: Support continuous monitoring (ConMon) strategies and execution.Identify and maintain cybersecurity compliance requirements for IT investments of the 54 and the DoDIN-A(NG) and DoDIN-A(NG)-S networks and computing services.Ensure adherence to DoD, DISA, and Department of the Army enterprise security requirements, including preparation for and successful completion of CCRIs, obtaining and maintaining Authority to Connect (ATC) and Authority to Operate (ATO), and compliance with STIGs and required IA controls.Help ensure compliance with Army directives and mandates aligned with the future Joint Information Environment (JIE) architecture.Measure ARNG compliance with cybersecurity requirements and recommend program execution activities, processes, and practices.Assist with secure configuration and preparation of IT below the system level (Software Assurance) across the 54 in coordination with RCC-NG, in accordance with applicable guidance prior to acceptance into or connection to Army IS and DoDIN-A(NG).Maintain an Accreditations and Expiration Dates Record for upcoming accreditation expirations using RMF Work Management SharePoint tracking tools.Ensure cybersecurity inspections, tests, assessments, and reviews are synchronized and coordinated with all stakeholders.Assist in the implementation, management, and administration of organizational structure and workflow within eMASS.Review cybersecurity information papers and plans with CYBERCOM, ARCYBER, Air National Guard Cyber, NSA, FBI, DOJ, and DHS.Support enforcement of the DoD Cyberspace Workforce Framework (DCWF) and cybersecurity certification program to ensure training and certification are enforced, managed, and reported.Help implement a streamlined process for reviewing, processing, and approving eMASS system access requests in support of RMF.Assist in examining security architectures and vulnerabilities through scans, configuration reviews, design documentation, and stakeholder interviews.Support identification, dissemination, and delivery of approved policy and process documentation for system authorization efforts using DoD, Army, and NIST guidance.QualificationsEducation / TrainingBachelor's degree in cybersecurity, information assurance, computer science, or related technical discipline; or equivalent combination of education, technical certifications/training, and work experience.Experience4–6 years of experience in cybersecurity, information assurance, or computer science.Hands-on RMF experience across Steps 0–6 is required.Technical & Professional SkillsStrong problem-solving, analytical, and decision-making skills.Ability to understand user requirements, troubleshoot technical issues, and develop creative process improvements.Demonstrated dependability: punctual, follows instructions, responds to direction, and seeks feedback.Customer service experience and comfort engaging with senior military and government leadership.Ability to clearly present ideas through briefings, meetings, and interaction with leadership of varied technical backgrounds.Ability to deliver training sessions and engage stakeholders to ensure task progress and adherence to timelines.Excellent communication and documentation skills.Strong organizational, collaborative, and teamwork skills.Ability to rapidly assimilate new information and self-study emerging requirements.Current industry knowledge of relevant concepts, practices, and procedures.Ability to work under time constraints and adapt to changing requirements and new projects.Commitment to maintaining and upgrading certifications.Other duties as assigned.CertificationsMust meet DoD 8570 IAM-I (e.g., Security+ CE); certification must be current and included with resume.Must obtain an additional certification within one year (e.g., CGRC, CISM, CISSP or CISSP Associate).ClearanceActive Secret clearance required at time of interview and must be maintained.Work Location & ScheduleLocation: Falls Church, VAHours and days TBD upon hire; occasional schedule adjustments may be required.On-site support required for the first 3 months. Pending performance, part-time telework may be considered (3 days onsite, up to 2 days remote per week). The government may require full-time onsite work.TravelUp to 10% travel.May include up to two conferences annually and site visits to the 54 up to eight times annually.The likely salary range for this position is $102,000 - $138,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Scheduled Weekly Hours:40Travel Required:10-25%Telecommuting Options:HybridWork Location:USA VA Falls ChurchAdditional Work Locations:Total Rewards at GDIT:Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.Our Identity Verification Process: