Talent.com
Security Compliance Manager
Security Compliance ManagerGDIT • (VAHOME), Office, Home, VA, USA
Security Compliance Manager

Security Compliance Manager

GDIT • (VAHOME), Office, Home, VA, USA
30+ days ago
Job type
  • Full-time
Job description

Job Description :

We are GDIT. We support and secure some of the most complex government, defense, and intelligence projects across the country. At GDIT, cyber security is not just a singular part of our mission—it connects every one of us because it’s embedded into every aspect of what we do.

GDIT is your place. You make it your own by bringing your ideas and unique perspective to our culture. By owning your opportunity at GDIT, you are helping us ensure today is safe and tomorrow is smarter. As a Security Compliance Manager , you will lead our security team in solving challenging problems for our client, the Division of Federal Systems (DFS) for the Office of Child Support Services (OCSS) under Health and Human Services (HHS) Administration for Children & Families (ACF).

Our team provides program support to DFS OCSS to manage and monitor the development, implementation, operation, maintenance, technical support, and enhancement of the division’s systems and services. Federal Parent Locator Service (FPLS) information is, by statute, made available to child support agencies and a limited number of federal and state agencies. These secure systems and services help child support agencies, employers, insurers, and financial institutions exchange information about child support cases; locate parents; establish paternity, custody and visitation; collect support; and identify fraud.

Currently, this role is hybrid. When on-site traveling is required, the work location for this position is the Department of Health and Human Services Mary Switzer Building near Federal Center Southwest in Washington, D.C.

This role’s core responsibilities consist of the following but not limited to :

People Management :

  • Lead and develop a high-performing security team of 3-4 FTEs to ensure compliance with security standards, while maintaining strong, proactive relationships with customers to meet their unique needs effectively
  • Serve as the primary point of contact for all client interactions, emphasizing strategic oversight and exemplary service to align with both organizational goals and customer expectations
  • Lead team meetings and represent security in Governance, Technical Operations, Change Advisory Board, and Technical Review Boards

Federal Systems, Security & Compliance Governance :

  • Develop and enforce security policies and procedures in compliance with Federal mandates, OMB, NIST standards, HHS / ACF & FPLS security requirements, and customer guidance regarding zero trust, supply chain, risk management, vulnerability management, etc.
  • Industry Knowledge : Stay abreast of emerging trends, technologies, and regulatory changes in the federal security compliance landscape and provide recommendations for adapting policies and procedures accordingly
  • Security Authorization :

  • Security Control Monitoring : Continuously monitor the implementation of security controls by collaborating with stakeholders, conducting regular internal assessments / audits, and recommend corrective actions as needed.
  • Provide guidance to the design and development teams on security issues and assist as needed in the development of security documentation (specifically, System Security Plan (SSP)) for Security Authorization
  • Assist the FPLS ISSO, FPLS ITSSO and Technical Manager to ensure that FPLS upholds all security requirements to maintain the ACF Authority to Operate
  • Risk Management :

  • Provide oversight to ensure comprehensive risk assessments and vulnerability scanning is performed of system portfolio to identify potential vulnerabilities and weaknesses in the organization's security posture
  • Participate in routine and on-demand system and application vulnerability scanning, document findings and recommendations, and present analysis of results to stakeholders
  • Document and track internal POAMs for DFS systems and applications
  • Incident Response & Reporting :

  • Maintain Incident Response (IR) Plan
  • Develop comprehensive reports detailing the nature and impact of each data incident and ensure timely notification to senior management and relevant government officials
  • Monitor and track data incidents through remediation and closure
  • Collaborate with internal teams and external stakeholders to effectively manage and resolve data incidents, ensuring adherence to established protocols and regulatory requirements
  • Utilize root cause analyses to enhance incident response procedures, mitigate risks, and improve overall data security posture and to minimize the risk of recurring incidents
  • Maintain accurate and comprehensive records of all data incidents, including incident details, response actions, and outcomes
  • Ensure proper documentation of incident resolution, lessons learned, and recommended preventive measures
  • Audits & Compliance :

  • Plan and execute regular audits to assess compliance with federal security standards and regulatory requirements
  • Support the Security Team in responding to external audits conducted by the HHS Inspector General (IG), Internal Revenue Service (IRS) and other Federal agencies as required
  • Support systems security evaluations, audits, and reviews.
  • Prioritize and coordinate the resolution of audit findings.
  • Contingency Planning / Disaster Recovery :

  • Maintain and update IT contingency plans and disaster recovery procedures.
  • Support DR exercises (tabletop, functional, etc.)
  • Security Site Assessments :

  • Lead security site assessments conducted on data-matching partner sites and FPLS contractor sites. This includes planning, reviewing relevant documents, writing comprehensive reports, and reviewing / responding to Plans of Action and Milestones (POAMs)
  • Questionnaire Review : Review questionnaires submitted by our matching partners to assess their adherence to security controls and requirements.
  • Conduct kickoff meetings and virtual audits to validate the implementation of appropriate security measures
  • Security Awareness Training :

  • Manage security trainings to educate staff on federal security requirements and best practices, ensuring that all training meets the compliance standards set by ACF, HHS, and the IRS
  • Assist in the development and delivery of Security Awareness Training as required
  • Stakeholder Communication :

  • Communicate effectively with various stakeholders, including senior management, IT teams, legal teams, and external auditors, to convey compliance issues, risks, and remediation plans.
  • Support the client in communicating and publishing security alerts, advisories, and bulletins as necessary
  • Documentation : Maintain accurate and up-to-date documentation of compliance activities, audit findings, and remediation efforts.
  • Technology :

  • Proficiency or familiarity with project management tools, particularly Jira, is preferred. The ability to effectively utilize Jira for task tracking, issue management, and collaboration is highly desirable.
  • WHAT YOU’LL NEED TO SUCCEED :

  • Bachelor's degree in Computer Science, Information Systems, or in a related field
  • Minimum of 5 years of experience working as a Federal Security Compliance Analyst with at least 5 years leadership experience in managing teams
  • 2 years security compliance experience NIST, FedRAMP, FISMA, OMB, ZTA, Supply Chain knowledge
  • PREFERRED QUALIFICATIONS :

  • Relevant security certifications (e.g., CISSP, CISM, CISA) are highly desirable
  • GDIT IS YOUR PLACE :

  • 401K with company match
  • Comprehensive health and wellness packages
  • Internal mobility team dedicated to helping you own your career
  • Professional growth opportunities including paid education and certifications
  • Cutting-edge technology you can learn from
  • Rest and recharge with paid vacation and holidays
  • The likely salary range for this position is $140,250 - $189,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

    Scheduled Weekly Hours :

    40

    Travel Required : Less than 10%

    T elecommuting Options :

    Hybrid

    Work Location :

    USA DC Home Office (DCHOME)

    Create a job alert for this search

    Security Compliance Manager • (VAHOME), Office, Home, VA, USA

    Similar jobs
    Targeting Officer - Active Security Clearance

    Targeting Officer - Active Security Clearance

    Cadre • VA, USA
    Full-time
    Quick Apply
    Serve as a specialized officer providing direct support to a client driving complex worldwide operations to develop actionable intelligence against the highest priority threats to US national secur...Show more
    Last updated: 30+ days ago
    Freelance Software Developer (Rust) - Quality Assurance (AI Trainer)

    Freelance Software Developer (Rust) - Quality Assurance (AI Trainer)

    Mindrift • Virginia, United States, Virginia, United States
    Remote
    Full-time +1
    This opportunity is only for candidates currently residing in the specified country.Your location may affect eligibility and rates. We believe in using the power of collective intelligence to ethica...Show more
    Last updated: 30+ days ago • Promoted
    Freelance Software Developer (Ruby) / Quality Assurance (AI Trainer)

    Freelance Software Developer (Ruby) / Quality Assurance (AI Trainer)

    Mindrift • Virginia, United States, Virginia, United States
    Remote
    Full-time +1
    This opportunity is only for candidates currently residing in the specified country.Your location may affect eligibility and rates. Please provide your resume in English and specify your proficiency...Show more
    Last updated: 30+ days ago • Promoted
    Freelance Software Developer (Ruby) - Quality Assurance (AI Trainer)

    Freelance Software Developer (Ruby) - Quality Assurance (AI Trainer)

    Mindrift • Virginia, United States, Virginia, United States
    Remote
    Full-time +1
    This opportunity is only for candidates currently residing in the specified country.Your location may affect eligibility and rates. We believe in using the power of collective intelligence to ethica...Show more
    Last updated: 30+ days ago • Promoted
    Automotive Tool Sales / Route Manager - Full Training (23963)

    Automotive Tool Sales / Route Manager - Full Training (23963)

    Mac Tools • Red House, VA, US
    Full-time
    Invest in Your Success with Mac Tools.Are you ready to be your own boss and build a thriving business? Mac Tools offers a unique opportunity to own and operate a successful franchise.With a strong ...Show more
    Last updated: 15 hours ago • Promoted • New!
    Freelance Software Developer (Java) - Quality Assurance (AI Trainer)

    Freelance Software Developer (Java) - Quality Assurance (AI Trainer)

    Mindrift • Virginia, United States, Virginia, United States
    Remote
    Full-time +1
    This opportunity is only for candidates currently residing in the specified country.Your location may affect eligibility and rates. Please submit your resume in English and indicate your level of En...Show more
    Last updated: 30+ days ago • Promoted
    Mission Manager - Active Security Clearance

    Mission Manager - Active Security Clearance

    Cadre • VA, USA
    Full-time
    Quick Apply
    Serve as a specialized officer providing direct support to a client driving complex worldwide operations to develop actionable intelligence against the highest priority threats to US national secur...Show more
    Last updated: 30+ days ago
    Drive with DoorDash - Flexible Onboarding

    Drive with DoorDash - Flexible Onboarding

    DoorDash • Schuyler, VA, United States
    Full-time +1
    DoorDash is the #1 category leader in food delivery, food pickup, and convenience store delivery in the US, trusted by millions of customers every day. As a Dasher, you’ll stay busy with a var...Show more
    Last updated: 13 days ago • Promoted
    Automotive Tool Sales / Route Manager - Full Training (23939)

    Automotive Tool Sales / Route Manager - Full Training (23939)

    Mac Tools • Evergreen, VA, US
    Full-time
    Invest in Your Success with Mac Tools.Are you ready to be your own boss and build a thriving business? Mac Tools offers a unique opportunity to own and operate a successful franchise.With a strong ...Show more
    Last updated: 15 hours ago • Promoted • New!
    API Security IAM

    API Security IAM

    Openkyber • VA, United States
    Full-time
    Quick Apply
    OpenKyber), is searching for an Sr.Application Security Architect for a Contract assignment with one of our premier Regulatory clients in Tysons, VA The Senior Application Security Architect is res...Show more
    Last updated: 7 days ago
    Flexible

    Flexible

    HomeJobFinder • Drakes Branch, VA
    Remote
    Full-time
    Flexible Job Opportunity : Link Posting Marketing Rep (No Experience Needed!) • •Are you driven, dependable, and ready to build income from ANYWHERE? • • We’re searching for motivated ...Show more
    Last updated: 14 days ago • Promoted
    Automotive Tool Sales / Route Manager - Full Training (23960)

    Automotive Tool Sales / Route Manager - Full Training (23960)

    Mac Tools • Prospect, VA, US
    Full-time
    Invest in Your Success with Mac Tools.Are you ready to be your own boss and build a thriving business? Mac Tools offers a unique opportunity to own and operate a successful franchise.With a strong ...Show more
    Last updated: 15 hours ago • Promoted • New!
    Restaurant Delivery - Flexible Onboarding

    Restaurant Delivery - Flexible Onboarding

    DoorDash • Schuyler, VA, United States
    Full-time +1
    DoorDash is the #1 category leader in food delivery, food pickup, and convenience store delivery in the US, trusted by millions of customers every day. As a Dasher, you’ll stay busy with a var...Show more
    Last updated: 13 days ago • Promoted
    Certified Flagger

    Certified Flagger

    PeopleReady • Drakes Branch, VA, United States
    Full-time
    PeopleReady of Lynchburg, VA is now hiring Certified Flaggers in Drakes Branch, VA! As a Certified Flagger, you will control vehicle traffic by notifying drivers of the need for reduced speeds or r...Show more
    Last updated: 6 days ago • Promoted
    IAM Operations Specialist

    IAM Operations Specialist

    Openkyber • VA, United States
    Full-time
    Quick Apply
    Title : IT Security Specialist Location : Rosslyn, VA - 100% Remote Job Title : IT - Information Assurance / Securit...Show more
    Last updated: 6 days ago
    Delivery Driver - Flexible Onboarding

    Delivery Driver - Flexible Onboarding

    DoorDash • Esmont, VA, United States
    Full-time +1
    DoorDash is the #1 category leader in food delivery, food pickup, and convenience store delivery in the US, trusted by millions of customers every day. As a Dasher, you’ll stay busy with a var...Show more
    Last updated: 13 days ago • Promoted
    Restaurant Delivery - Flexible Schedule

    Restaurant Delivery - Flexible Schedule

    DoorDash • Faber, VA, United States
    Full-time +1
    DoorDash is the #1 category leader in food delivery, food pickup, and convenience store delivery in the US, trusted by millions of customers every day. As a Dasher, you’ll stay busy with a var...Show more
    Last updated: 13 days ago • Promoted
    Border Patrol Agent - Earn up to $30,000 in Recruitment Incentives

    Border Patrol Agent - Earn up to $30,000 in Recruitment Incentives

    U.S. Customs and Border Protection • Appomattox, VA, US
    Full-time
    Customs and Border Protection (CBP) offers those interested in a career in law enforcement an exceptional opportunity to work with an elite team of highly trained professionals whose camaraderie, p...Show more
    Last updated: 6 days ago • Promoted