IT Specialist

2 weeks ago


China Lake, United States NAVAIR Full time

Position Description Specific duties include but are not limited to: 1. Maintain the organizations cybersecurity program that includes cybersecurity architecture, requirements, objectives and policies, cybersecurity personnel, and cybersecurity processes and procedures in direct collaboration with the Cyber Security Directorate (CSD). 2. Act as a cybersecurity technical advisor for the organization and to the AO for the systems under their purview. 3. Assisting in securing nationwide multi-level security information systems, works directly with the ISSM and other organizations, Navy and non-Navy, to formulate new policies and procedures for risk analysis and risk management solutions that can be adapted and applied to future systems. 4. Communicate and collaborate with the Command ISSM (CISSM) and Command Security Manager in areas of mutual interest and impact. 5. Analyze customer information systems for risk to the organization. 6. Maintain a repository for all cybersecurity-related documentation, i.e. Cybersecurity Workforce (CSWF) management and tracking, Certification and Accreditation (C&A), and Computer Network Defense (CND). 7. Monitor information systems and user compliance with cybersecurity policy, as appropriate, and review the results of such monitoring. 8. Ensure that any cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations. 9. Ensure implementation of IS security measures and procedures, including reporting incidents to the ISSM or CISSM, Authorizing Official (AO) and appropriate reporting chains and coordinating system-level responses to unauthorized disclosures in accordance with DoD Manual 5200.01, "DoD Information Security Program," February 24, 2012. 10. Ensure that the handling of possible or actual data spills of classified information resident in NAWCWD ISs, are conducted in accordance with DoD Manual 5200.01, Volume 3, "DoD Information Security Program: Protection of Classified Information," February 24, 2012, as amended. 11. Ensure that any cybersecurity-related events or configuration changes that may affect the system authorization or security posture of the IS are formally reported to the ISSM/CISSM and/or AO and other affected parties. Additional functions commonly performed by employees in this specialty may include: -- Assist the Information Systems Security Manager (ISSM) by developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data; -- Assume ISSM responsibilities in the absence of the ISSM; -- Conducting risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs; -- Promoting awareness of security issues among management and ensuring sound security principles are reflected in organizations' visions and goals; -- Conducting systems security evaluations, audits, and reviews; -- Developing systems security contingency plans and disaster recovery procedures; -- Serve as member of the Change Control Board (CCB); -- Developing and implementing programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures; -- Participating in network and systems design to ensure implementation of appropriate systems security policies; -- Assessing security events to determine impact and implementing corrective actions; and/or -- Ensuring the rigorous application of information security/information assurance policies, principles, and practices in the delivery of all IT services. -- Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly; -- Ensure audit records are collected, reviewed, and documented (to include any anomalies). Entry requirement includes current Secret clearance and DoD 8570.01-m certification as IAM Level II includes current Security+ certification. Requires the ability to obtain and maintain the following: Top Secret clearance. Minimum Salary 76,135 Maximum Salary 141,064