Type of Requisition:
Regular
Clearance Level Must Currently Possess:
None
Clearance Level Must Be Able to Obtain:
None
Public Trust/Other Required:
MBI (T2)
Job Family:
Cyber and IT Risk Management
Job Qualifications:
Skills:
Compliance Activities, Cybersecurity Compliance, Leadership
Certifications:
None
Experience:
5 + years of related experience
US Citizenship Required:
Yes
Job Description:
Seize your opportunity to make a personal impact as a SECURITY COMPLIANCE LEADsupporting Department of Veterans Affairs (VA) GDIT is your place to make meaningful contributions to challenging projects, build your skills, and grow a rewarding career.
At GDIT, people are our differentiator. As a SECURITY COMPLIANCE LEAD supporting the Department of Veterans Affairs (VA) in Austin, Texas you will help ensure today is safe and tomorrow is smarter.
Join GDIT to support the Department of Veterans Affairs (VA) through the Infrastructure Operations Support Services program.
HOW A SECURITY COMPLIANCE LEAD WILL MAKE AN IMPACT
As the Security Compliance Lead, you will manage enterprise cybersecurity compliance activities across IO, ensuring RMF execution, A&A rigor, POA&M accuracy, audit readiness, and alignment with VA governance and federal security standards.
In this role, you will lead system authorization activities, maintain security documentation, oversee POA&M updates, coordinate continuous monitoring, validate SSPs and control evidence, and ensure vulnerability remediation cycles meet VA expectations. You will work closely with System Owners, Authorizing Officials, cybersecurity teams, engineers, and auditors to strengthen security posture and maintain compliance across assigned systems and boundaries.
You will manage RMF workflows, compliance dashboards, audit preparation, scorecard reviews, and recurring reporting packages. You will streamline evidence collection, improve documentation quality, refine remediation processes, and embed compliance requirements throughout the system lifecycle. You will also coordinate with hosting, database, application, cloud, and cybersecurity teams to ensure security compliance operations remain aligned, efficient, and collaborative.
You will engage directly with VA leadership and stakeholders to clarify requirements, present RMF and audit updates, deliver POA&M reviews, and provide remediation recommendations. Your communication practices will strengthen transparency, trust, and confidence across VA's security compliance environment.
You will drive continuous improvement by identifying gaps, addressing recurring findings, refining SOPs, modernizing reporting, enhancing automation of compliance workflows, and strengthening vulnerability follow-through. Your leadership ensures VA's security compliance remains accurate, resilient, policy-aligned, and continuously improving.
What You'll Need to Succeed
• Bachelor's degree or equivalent and 5+ years of experience
• Experience leading cybersecurity compliance, RMF, ISSO support, or A&A activities in enterprise IT environments
• Demonstrated expertise in NIST 800-53, RMF, POA&M management, SSP development, and audit readiness
• Strong understanding of ITSM, security operations, federal compliance frameworks, and enterprise-class system governance
• Ability to evaluate cybersecurity documentation, authorization artifacts, risk analyses, vulnerability trends, and evidence for completeness, accuracy, and compliance
• Experience developing compliance plans, audit logs, dashboards, risk reports, POA&M packages, and corrective-action processes
• Excellent written, analytical, and stakeholder communication skills
• Ability to collaborate across cybersecurity, engineering, operations, audit, and federal organizations
Desired Qualifications
• Experience supporting VA, federal agencies, or regulated security environments
• Security certifications such as CISSP, CAP, Security+, RMF Practitioner, or similar
• Familiarity with federal cybersecurity requirements, FISMA audits, POA&M processes, boundary management, vulnerability management tools, and compliance frameworks
• Experience with GRC tools, RMF workflows, audit support platforms, and enterprise cybersecurity reporting tools
Security Clearance
• Must be able to obtain a Public Trust clearance
Location:
Austin, TX (hybrid)
No visa sponsorship is available for this position
The likely salary range for this position is $123,250 - $166,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours:
40
Travel Required:
Less than 10%
Telecommuting Options:
Hybrid
Work Location:
USA TX Austin
Additional Work Locations:
Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.
Our Identity Verification Process:
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
