Information System Security Specialist

Summary:

The Information Systems Security Specialist provides Information Systems (IS) security and information assurance support to corporate operations and in a shared services environment.

Specific Duties: 

*  Provides direct support to the Director of Security and Chief Information Officer (CIO) to ensure proper
  system and information protection and accreditation
*  Provides IS support to the CIO in the implementation of applicable laws, regulations, and polices and assists in all technical and management service areas supporting an array of information and data processing systems, their software, processes and activities throughout their life cycle.
*  Provides in-depth Information Assurance (IA) support for the systems that may include development of an IA  Policy Framework that focuses on a risk management approach to securing business assets
*  Supports the Director of Security in achieving strategic objectives by providing subject matter
  expertise in the areas of business process analysis and re-engineering, improving efficiency, technology insertion and improving collaborative tools, and improving joint picture development in all aspects of IT/IA security initiatives
*  Ensures defined security solution is effective and meets all security requirements identified by the Director Central Intelligence Directive (DCID 6/3)and Department of Defense (DoD) security standards
*  Ensures new Information Systems (IS) are designed and developed with appropriate security features and safeguards as outline in policy
*  Ensures that the system enhancements will provide equal or improved effectiveness of the already existing security features and are consistent with policy
*  Conducts and/or the Certification and Accreditation Testing of new and existing systems
*  Advises the security requirements of applicable policies and directives
*  Assists and advises the contract Information System Security Manager (ISSM), and the Information System Security Officer (ISSO) in the security evaluation of the system
*  Ensures applicable certification test and evaluation plans are developed
*  Assists, advises on and validates the security documentation (SSAA, SRTP, STP, Trusted Facilities Manual (TFM)
*  Directs and/or perform periodic penetration testing to include external testing that focuses on the servers, infrastructure and the underlying software comprising the target, internal testing that uses similar testing methodologies except the testing is perform internal to the DMZ, Wireless/Remote Access testing, and Telephone/War dialing
*  Coordinates security relevant certification issues with DAA Representative and ISSM

 

Requirements:

Bachelor's degree (or equivalent experience) and a minimum of 5 years information assurance/information security experience required.

Additional Requirements:

* Knowledge of IA and Certification & Accreditation activities and procedures in accordance with DCID 6/3, JAFAN 6/3, NISPOM Chapter 8, JDCSISSS-Rev21, and any other applicable security guidance
* Knowledge of HIPAA standards and policy
* Familiarity with system functions, security policies, technical security safeguards, and operational security measures
* Knowledge of Department of Defense IT security-related standards
* Knowledge of DoD IT Governance, enterprise architecture development and CIO support
* Knowledge of Information Assurance Technology Framework
* Familarity with IT solution development in compliance with DCID 6/3, JDCSISSS_Rev21, JAFAN 6/3, and any other applicable security guidance
* Experience with auditing, risk and threat analysis,
  contingency planning, and implementing security standards and methods
* Position requires 25% travel
* Possession of an active TOP SECRET security clearance with a special background investigation required

 

Desired Skills and Knowledge:

*  At least 3 years experience directly supporting DoD IT Governance, enterprise architecture development and CIO support desired
*  Masters degree in Computer Science, Information Management, or equivalent desired
*  Certified Information Security Systems Professional (CISSP) certification strongly
  desired