Description
As an Information Security Analyst Sr Principal at GDIT, you will play a critical role in achieving and sustaining the Authorization to Operate (ATO) for enterprise systems within a federal government agency.
You will be part of the Assessment & Authorization (A&A) team across all phases of the NIST Risk Management Framework, including:
- Categorizing information and system components
- Conducting Privacy Impact Assessments
- Developing risk management strategies
- Creating and maintaining security documentation
- Developing Security Control Implementation Statements
- Developing, tracking, and following up on Plans of Action and Milestones (POAM)
- Gathering information essential for drafting security controls, policies, and process documentation
You will also develop Security Impact Analyses (SIA) for system changes and update key security documentation, including the System Security Plan (SSP), Information Security Contingency Plan, and other required security artifacts.
Additionally, you will need to have experience with governance risk and compliance (GRC) tools such as JCAM/Archangel/Xacta.
The likely salary range for this position is $153,000 - $207,000.