Information Security Specialist (INFOSEC)

Information Security Specialist

As an Information Security Specialist you will perform the following duties:

• Responsible for assisting in leading efforts within the agency to plan, develop, and maintain an agency-wide IT Security program in accordance with the Federal Information Security Management Act (FISMA) which establishes appropriate controls to ensure the protection of GSA's IT assets. The incumbent will assist in ensuring that all laws, regulations, policies, and procedures related to IT Security are implemented within GSA on a nationwide basis. The incumbent will be involved in finding technical solutions and providing technical guidance in IT security implementation. The responsibilities include addressing IT security concerns and facilitating IT security solutions for the agency.

• Participates in conducting and managing independent evaluations and compliance reviews of OCIO IT systems for which he/she has responsibility in accordance with FISMA. This includes, but is not limited to, Plan of Action and Milestones (POA&M) reviews, security authorization package reviews, exhibit 300 reviews, vulnerability assessments and scanning activities, system configuration reviews, and system inventory reviews.

• Serves as subject matter expert in all aspects relating to GSA's mobile device program. The incumbent supports the CISO in managing GSA's mobile device (Smartphone/tablet) program, its security, policy development and all aspects of management and implementation. The incumbent's expertise shall include Apple iOS, Google Android, and BlackBerry mobile platforms.

• Responsible for CIO contingency event (COOP) planning, training, training exercises and management of actual event scenarios. Coordinates with senior management and other Service/Staff Office representatives to ensure IT support is available and requested support is provided. Coordinates on behalf of the GSA, CIO for additional support, redistribution of assets and manpower as well as tracking personnel accountability during an actual event.

• Responsible for reviewing and coordinating reporting of Security Advisory Alerts (SAA), compliance reviews, security training, incident reports, contingency plan testing, and other IT security program issues. The incumbent is responsible for supporting the security measures and goals set by the GSA Chief Information Security Officer.