IT Specialist (Infosec)

IT Specialist (Infosec)Plan, develop, implement, and maintain IT operating systems, policies, and procedures to protect the integrity and confidentiality of systems, networks, and data.Designs, acquires, modifies, evaluates, and uses software intended to ensure that users are trained on security measures necessary to protect automated systems and classified data from misuse or unauthorized disclosure, viral infection, and other problems that would compromise information confidentiality or privacy.Evaluates new security authentication technologies such as public key infrastructure certificates, secure cards, and biometrics for inclusion in operating systems.Recommends that acquisition, implementation, and dissemination of IT security tools, procedures, and practices to be used by users to protect information assets.Develops operating system security policy and procedural controls covering physical security, application, and data security, system software security, contingency planning, and compliance with personnel clearance procedures.Establishes risk-management procedures and ensures that risk-management techniques are applied to all new and modified IT training applications.Identifies and specifies information systems security requirements associated with migrations to new environments and provides guidance in planning and development of migrations to new environments.Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls.Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspection, etc.Assure successful implementation and functionality of security requirements and appropriate information technology (IT) policies and procedure that are consistent with organization's mission and goals.Analyze and report organizational security posture trends.Analyze and report system security posture trends.Work with stakeholders to resolve computer security incidents and vulnerability compliance.Skill in applying total infrastructure protection, systems security certification and accreditation requirements/processes and Federal information systems security protocols.Skill in requirements analysis principles and methods, communications techniques, network operations and protocols, systems security regulations, and policies.Knowledge of appropriate VA policies, operating procedures, information flow; and of prevailing IT practices in government agencies and the private sector.Discuss timeframes, scope of the assignment including possible stages, and possible approaches.Plans and carries out projects and analyses of the organization's requirement; interprets policies, procedures, and regulations in conformance with established mission objectives; integrates and coordinates the work of others as necessary; and resolves most conflicts as they arise.Influence and persuade employees and managers to accept and implement findings and recommendations when there are problems in security cooperation.Meets the needs of customers while supporting missions.Communicates and treats customers in a courteous, tactful, and respectful manner.Provides the customer with consistent information according to established policies and procedures.Handles conflicts and problems in dealing with the customer constructively and appropriately.Perform other related duties and responsibilities as assignedWork Schedule: M - F, 8 am - 4:30 pmCompressed/Flexible: Compressed/flexible schedule available at the manager's discretionTelework: Ad Hoc/Situational as determined by Agency policy.Virtual: This is not a virtual position.Position Description/PD#: IT Specialist (Infosec)/ PD31646A