Information Security Analyst Principal

GDIT is seeking an Information Security Analyst Sr Advisor to support the Indian Health Service (IHS). This role is remote within the USA.

About the role

Provide support for DHHS information security, including facilitating current security infrastructure and defining future programs. Design and implement firewall and related security solutions. Analyze information systems to ensure appropriate security functions are included in design and architecture.

• Participate in IHS development processes by assisting developers and conducting security impact assessments for development changes.
• Assist with implementation of counter-measures or mitigating controls.
• Provide guidance in creating and maintaining Standard Operating Procedures, System Security Plans, Security Manuals, and similar documentation.
• Manage responses and/or remediation of Plan of Action and Milestones (POAMs) related to government investment-supported systems.
• Maintain current knowledge of relevant technology as assigned.
• Participate in special projects as required.
• Stay informed about emerging security requirements (e.g., zero trust, SBOM) and communicate impacts to the team.
• Serve as the conduit between the GDIT team and customer security organizations.

Requirements

• Bachelor’s Degree in IT Security, Computer Science, or a related technical discipline, and 10+ years of related experience or Master’s Degree and 8 years or PhD/Doctorate and 6 years of related experience.
• IT Security implementation and monitoring experience.
• General knowledge of scientific processes, management structures, and technology programs/platforms.
• Familiarity with Agile Software Development Lifecycle (SDLC) Methodology.
• Expert knowledge of data security administration principles, methods, and techniques.
• Familiarity with domain structures, user authentication, and digital signatures.
• Broad knowledge of security (IA) practices and tools.
• Understanding of network configuration and monitoring.
• Understanding of federal security policies and procedures, including FIPS 199, FIPS 200, and NIST 800-53.
• Requires the ability to pass an IHS background check to obtain an appropriate level Public Trust clearance (MBI/T2).

Preferred Qualifications

• Familiarity with Electronic Healthcare technology and operations.
• Familiarity with Source Code Control/Version Management software.
• Knowledge of the VistA electronic health record or Resource Patient Management System (RPMS).
• Understanding of the Department of Health and Human Services (HHS) Enterprise Performance Life Cycle (EPLC).
• Security certification such as CISSP or CISA.

Benefits

• Full-flex work week with core hours Monday - Friday 9:00 AM ET - 3:00 PM ET.
• 401K with company match.
• Comprehensive health and wellness packages.
• Internal mobility team dedicated to career growth.
• Professional growth opportunities, including paid education and certifications.
• Cutting-edge technology for learning and development.
• Paid vacation and holidays.
• Challenging work with real-world impact.

Pay

The likely salary range for this position is $97,968 - $132,250. Salary will be set based on experience, geographic location, and possibly contractual requirements.

Schedule

• Scheduled Weekly Hours: 40
• Travel Required: Less than 10%
• Telecommuting Options: Remote (Any Location within the USA)