It Specialist (Infosec)

Duties

Help

Major duties include but not limited to:

• Develops, implements, monitors and tracks controlled access programs to ensure security viability of appropriate AIS policies, as well as the acquisition of IT security tools.
• Plans, develops, establishes and implements local AIS systems security program(s), such as IT security certification and accreditation processes, regular and recurring COTS analysis and the performance of tests and assessments of security authentication technologies
• Independently conducts or leads ad hoc teams in the conduct of comprehensive program studies and evaluations to assure efficacy and viability of AIS operations, as well as to foster management compliance with and adherence to established Federal and VA/OIT laws, regulations, policies and procedures established to protect AIS from unauthorized access; and sensitive data from fraudulent compromise.
• Develops and implements program procedures to ensure that systems, network and data users are aware of, as well as understand and adhere to AIS policies and procedures.
• Plans, establishes, and implements local AIS systems security program(s), such as IT security, certification and accreditation processes, regular and recurring COTS analysis and the performance of tests and assessments of security authentication technologies.
• Develops and implements program procedures to ensure that systems, network, and data users are aware of, as well as understand and adhere to AIS policies and procedures.
• Ensures the rigorous application of AIS policies, principles, and practices relative to all local IT systems and services.
• Independently investigates or leads ESO security teams in the conduct of investigations of local AIS programs to identify possible breach of security and/or other violations.
• Assesses security incidents to determine impact and initiate corrective action; takes appropriate measures to resolve and report incidents; documents and reports method(s) used to resolve significant security breaches/issues to OIT/ISO and local facility management; and performs follow up action(s) to ensure suitable corrective action(s) are accomplished.
• Conducts systems security evaluations, audits and reviews; and develops AIS security contingency plans and disaster recovery procedures.
• Facilitate and coordinate the gathering, analysis and preservation of evidence used in addressing security violations
• Performs other duties as assigned.

Work Schedule: Monday through Friday, 8:00am to 4:30pm

Compressed/Flexible: Not Authorized

Telework: This position may be authorized for telework.

Virtual: This is not a virtual position.

Position Description/PD#: IT Specialist (Infosec) PD06078A