Security Compliance Lead

About the role

Seize your opportunity to make a personal impact as a Security Compliance Lead supporting the Department of Veterans Affairs (VA). As part of GDIT’s Infrastructure Operations Support Services program in Austin, Texas (hybrid), you will help ensure today is safe and tomorrow is smarter by managing enterprise cybersecurity compliance activities, leading system authorization efforts, and strengthening VA’s security posture. This position requires the ability to obtain a Public Trust clearance and does not offer visa sponsorship.

Responsibilities

• Manage enterprise cybersecurity compliance activities across IO, ensuring RMF execution, A&A rigor, POA&M accuracy, audit readiness, and alignment with VA governance and federal security standards.
• Lead system authorization activities, maintain security documentation, oversee POA&M updates, coordinate continuous monitoring, validate SSPs and control evidence, and ensure vulnerability remediation cycles meet VA expectations.
• Work closely with System Owners, Authorizing Officials, cybersecurity teams, engineers, and auditors to strengthen security posture and maintain compliance across assigned systems and boundaries.
• Manage RMF workflows, compliance dashboards, audit preparation, scorecard reviews, and recurring reporting packages.
• Streamline evidence collection, improve documentation quality, refine remediation processes, and embed compliance requirements throughout the system lifecycle.
• Coordinate with hosting, database, application, cloud, and cybersecurity teams to ensure security compliance operations remain aligned, efficient, and collaborative.
• Engage directly with VA leadership and stakeholders to clarify requirements, present RMF and audit updates, deliver POA&M reviews, and provide remediation recommendations.
• Drive continuous improvement by identifying gaps, addressing recurring findings, refining SOPs, modernizing reporting, enhancing automation of compliance workflows, and strengthening vulnerability follow‑through.
• Ensure VA’s security compliance remains accurate, resilient, policy‑aligned, and continuously improving through leadership and stakeholder communication.

Requirements

• Bachelor’s degree or equivalent and 5+ years of related experience.
• Experience leading cybersecurity compliance, RMF, ISSO support, or A&A activities in enterprise IT environments.
• Demonstrated expertise in NIST 800‑53, RMF, POA&M management, SSP development, and audit readiness.
• Strong