INFORMATION TECHNOLOGY SPECIALIST (INFOSEC)

DCSA's Industrial Security Office is looking for Information Systems Security Professionals (ISSP) with responsibility for oversight of complex information assurance and cyber related activities at cleared contractor sites across the country. The ISSP employs technical knowledge and interpersonal skills to ensure information systems security managers understand and implement the technical controls and processes required to protect classified information.

As an INFORMATION TECHNOLOGY SPECIALIST (INFOSEC) you will be responsible for the following duties: Serve as an Information Systems Security Professional (ISSP) within the assigned region. Perform Cybersecurity activities including security control assessments in support of Information Technology (IT) system assess and authorize activity utilizing the Risk Management Framework (RMF). Exercise security oversight of cleared contractor information systems within the National Industrial Security Program (NISP). Analyze, assess, evaluate, verify and validate cleared contractor information system security plans and controls, and deliver system authorization risk recommendations to the Authorizing Official. Develop and maintain security documentation and artifacts for Information Systems assigned. Engage and interface with industry security professionals to assess implemented security controls. Enforce IT security control requirements, recommend configurations for information systems and networks and identify strategies to manage risk through mitigation of IT vulnerabilities, considering the rapidly evolving Cybersecurity threat to IT systems. Serve as spokesperson at conferences and training meetings to convey NISP and RMF implementation guidance and Cybersecurity information relating to industrial security.

Substitution of education may not be used in lieu of specialized experience for this grade level.