IT SPECIALIST (INFOSEC)

Position Description

The incumbent serves as an Information Systems Security Officer (ISSO). The candidate will ensure the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, policies, procedures, and tools. The individual assigned to the ISSO billet must have or be eligible to obtain a DoD Top Secret security clearance based upon an Single Scope Background Investigation (SSBI); currently possess or obtain a DoD 8570.01-M IA baseline IAT level II or IAM level I certification within the first six months of employment; able to travel periodically in support of the organizations cybersecurity operations and cyber-thrusts; possess 1-3 years of information assurance or cybersecurity related experience.  

Functions commonly performed by employees in this specialty may include: 

-- Assist the Information Systems Security Manager (ISSM) by developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data; 

-- Assume ISSM responsibilities in the absence of the ISSM; 

-- Conducting risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs; 

-- Promoting awareness of security issues among management and ensuring sound security principles are reflected in organizations' visions and goals; 

-- Conducting systems security evaluations, audits, and reviews; 

-- Developing systems security contingency plans and disaster recovery procedures; 

-- Serve as member of the Change Control Board (CCB); 

-- Developing and implementing programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures; 

-- Participating in network and systems design to ensure implementation of appropriate systems security policies; 

-- Assessing security events to determine impact and implementing corrective actions; and/or 

-- Ensuring the rigorous application of information security/information assurance policies, principles, and practices in the delivery of all IT services. 

-- Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly; 

-- Ensure audit records are collected, reviewed, and documented (to include any anomalies). 

Minimum Salary

62,729

Maximum Salary

131,452