IT Specialist (INFOSEC)

Position Description

DUTIES NARRATIVE
The incumbent manages a dynamic cybersecurity program utilizing policies and programs from the local command through DoW, and collaborating with personnel from across the command, various agencies, and numerous program offices. The incumbent is the principal advisor to the program manager on all Risk Management Framework (RMF) matters, technical and otherwise, involving the security of information systems (IS) under their purview, in accordance with applicable policies. The incumbent supports their program’s cybersecurity needs by coordinating with Information System Security Officers, System Administrators, Program Managers, Information System Owners, command leadership, security personnel, and various agencies. The incumbent provides expert evaluation and remediation of identified risks to hardware and software. The incumbent ensures continued readiness for Cyber Security Inspections (CSI) and Assessment and Authorization (A&A) events through development of policies and programs for Information Systems including Continuous Monitoring, Access Control, Incident Response, Data-at-Rest, data transfer, system maintenance including end-of-life components, templates for required artifacts, and training on all programs and policies. The incumbent periodically conducts cyber self-inspections of programs for adherence to the command wide programs and policies and communicates deficiencies or opportunities for improvement to program and command leadership.
Must demonstrate an ability to develop and maintain a schedule across programs with competing priorities and varying complexities and achieve scheduled completion dates without slippage. The incumbent must be able to develop reports and graphics to communicate trends, security incidents, vulnerabilities, ATO status, training completion, and other topics of interest to program leadership. Must demonstrate an ability to communicate with engineers and physicists, program managers, external stakeholders, and command leadership, utilizing simple language to express complex ideas to a wide audience with differing levels of familiarity with the subjects being discussed. Similarly, the incumbent must be able to communicate those same topics as well as train junior personnel on all aspects of cybersecurity, including technical instruction on complex tasks, at a language level commensurate with a junior audience.

Experience Required

4-7 Years

Minimum Salary

$104,349

Maximum Salary

$161,313