Information Security Analyst Principal

About the role

GDIT is seeking a Senior Information Security Analyst Advisor to support the Indian Health Service (IHS). In this role, you will provide support for DHHS information security, facilitate current security infrastructure, and define future programs, including the design and implementation of firewall and related security measures.

Responsibilities

• Analyze information systems to ensure appropriate security functions are included in systems design and architecture.
• Participate in IHS development processes by assisting developers and conducting security impact assessments for development changes.
• Assist with the implementation of counter-measures or mitigating controls.
• Provide guidance in the creation and maintenance of Standard Operating Procedures, System Security Plans, Security Manuals, and similar documentation.
• Manage responses and/or remediation of Plan of Action and Milestones (POAMs) related to government investment-supported systems.
• Maintain current knowledge of relevant technology as assigned.
• Participate in special projects as required.
• Stay informed about current and emerging security requirements (e.g., zero trust, SBOM) and communicate impacts to the team.
• Serve as the conduit between the GDIT team and customer security organizations.

Requirements

• Bachelor’s Degree in IT Security, Computer Science, or a related technical discipline, and 10+ years of related experience or Master's Degree and 8 years of related experience or PhD/Doctorate and 6 years of related experience.
• IT Security implementation and monitoring experience.
• General knowledge of scientific processes, management structures, and technology programs/platforms.
• Familiarity with Agile Software Development Lifecycle (SDLC) Methodology.
• Expert knowledge of data security administration principles, methods, and techniques.
• Familiarity with domain structures, user authentication, and digital signatures.
• Broad knowledge of security (IA) practices and tools.
• Understanding of network configuration and monitoring.
• Understanding of federal security policies and procedures, including FIPS 199, FIPS 200, and NIST 800-53.
• Security certification such as CISSP or CISA (preferred).

Preferred Qualifications

• Familiarity with Electronic Healthcare technology and operations.
• Familiarity with Source Code Control/Version Management software.
• Knowledge of the VistA electronic health record or Resource Patient Management System (RPMS).
• Understanding of the Department of Health and Human Services (HHS) Enterprise Performance Life Cycle (EPLC).

Clearance

Requires the ability to pass an IHS background check to obtain an appropriate level Public Trust clearance (MBI/T2).

Schedule

• Full-flex work week with core hours: Monday – Friday, 9:00 AM ET – 3:00 PM ET.
• Scheduled weekly hours: 40.
• Travel required: Less than 10%.
• Telecommuting options: Remote (within the USA).

Pay

The likely salary range for this position is $97,968 - $132,250, based on experience, geographic location, and contractual requirements.

Benefits

• 401K with company match.
• Comprehensive health and wellness packages, including medical, dental, and vision plans (some with Health Savings Accounts).
• Paid time off: 15 days of vacation, 10 holidays, and additional paid leave for sick/personal time, parental leave, military leave, bereavement, and jury duty (prorated based on hire date).
• GDIT Paid Family Leave program: up to 160 hours of paid leave in a rolling 12-month period.
• Income protection offerings: short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel/accident insurance.
• Internal mobility team dedicated to career growth.
• Professional growth opportunities, including paid education and certifications.