> Markdown version of [/jobs/ext/3737906-lead-information-assurance-analyst](https://www.wearedevelopers.com/jobs/ext/3737906-lead-information-assurance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Information Assurance Analyst

- **Company:** Gridiron IT Solutions LLC
- **Location:** Fort Meade, MD, United States (Remote available)
- **Experience:** Expert
- **Salary:** $110,000.0 - $155,000.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Wireless LAN, Cyber Security, Information Systems, Computer Networks, IPv6, Information Systems Security Architecture Professional, Network Service, Systems Development Life Cycle, Zero Trust Network Access, Software Construction, Information Technology
- **Published:** October 14, 2026
- **Apply:** https://www.careerjet.com/job/us49904b9ccde57b24ba1efdf57aa78bf9/eaa

## About the Role

Bachelor's degree and 12+ years of experience. Additional years of directly applicable experience may be accepted in lieu of a degree.
Prior relevant experience working with RMF and serving as an ISSO, providing ISSO support, serving as an SCA representative, or performing a similar role.
Current DoD 8570 IAT Level II certification, such as Security+.
Experience performing multiple types of vulnerability and assessment scans with multiple tools.
Experience using eMASS and/or Xacta.
Solid understanding of the Risk Management Framework and System Development Life Cycle.
Understanding of hardware and software engineering best practices.
Demonstrated analytical and problem-solving skills.
Ability to meet eligibility requirements for assignment to the specified contract.
Ability to meet government security-investigation and eligibility requirements.
U.S. citizenship, as required by the government contract.
Active Secret security clearance.
Desired Qualifications
Experience collaborating with diverse stakeholders to drive consensus and forward progress.
Ability to identify needed changes to processes and activities and help implement continuous-improvement solutions.
Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), and/or Certified Accreditation Professional (CAP).
Ability to work successfully as part of a virtual team. Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

## Description

The role includes measurable efforts involving automation, cybersecurity posture improvement, scalability of the DoD Network environment, improved performance, reduced network redundancies, and increased efficiency in sustaining the single service provider environment.
The selected candidate will conduct or review technical security assessments, identify vulnerabilities and noncompliance with IA requirements, recommend mitigations, support RMF activities, contribute to secure system design, and participate in risk assessment throughout the certification and accreditation process.
Program and Project Focus
Deliver enhanced network capabilities for the DISA network.
Support implementation of Zero Trust policies.
Support migration of network services.
Support modernization of wireless LAN services.
Support implementation of IPv6.
Explain the security-policy implications of engineering design decisions.
Document security compliance for Authority to Operate submissions.
Coordinate information assurance submissions with government ISSM counterparts.
Lead cybersecurity submissions for engineering projects as they progress through design, testing, and deployment.
Primary Responsibilities
Evaluate, develop, and implement information assurance guidelines and procedures as required.
Recommend security-solution mitigations and enhancements that support IA guidelines and customer requirements.
Perform vulnerability and risk analyses of computer systems and applications throughout all phases of the system development life cycle.
Conduct IT security site surveys.
Support Authorizing Official actions by developing and delivering accreditation packages with supporting documents and artifacts in accordance with RMF, NIST SP 800-37 Revision 2, and agency-specific RMF requirements.
Provide input to an Audit and Accountability Plan containing methods, procedures, and planned reviews for continuing accreditation and authorization against NIST SP 800-53 Audit and Accountability family controls.
Provide input to and implement an organizational access-control policy and plan aligned with risk levels defined in NIST SP 800-53 Revision 4, including auditing at least annually.
Develop processes and procedures for evaluating and documenting information-system security vulnerabilities in accordance with DoDI 8510.01, Risk Management Framework for DoD IT.
Ensure information systems meet or exceed compliance requirements.
Identify, report, and resolve security violations.
Establish and satisfy information assurance and security requirements based on user, policy, regulatory, and resource demands.
Perform multiple types of vulnerability and assessment scans using multiple tools.
Use eMASS and/or Xacta to support authorization and compliance activities.
Mentor team members.
Monitor and review regular updates and upgrades to equipment and procedures to maintain alignment with IA requirements and business needs.
Identify security requirements for the proper handling of government data.