Dean | Fluor System Security Compliance Officer

System Security Compliance Officer

The System Security Compliance Officer's role is to ensure the secure operation of mission computer systems, including servers, workstation, and network infrastructure in accordance with Computer Network Defense (CND) directives, internal processes and procedures, and organization specific security requirements. The System Security Compliance Officer is to deploy, maintain and operate security and audit systems and their corresponding or associated software.

Responsibilities

Managing malware detection, Host Intrusion Prevention, and Rogue System Detection using a security suite such as McAfee ePO Vulnerability management including vulnerability scanning, analysis, and remediation (e.g. Tenable Nessus) Working with systems administrators to remediate vulnerabilities and compliance findings. Management and reporting of security event logging (e.g. Splunk, EventSentry, etc.) Perform SCAP scans and assure compliance with DISA STIGs Responding to Information Assurance Vulnerability Management Alerts (IAVM) Maintain patch repositories and packages such as Windows System Update Services (WSUS) or RedHat RPMs Routinely generating and disseminate reports and reporting data such as task order compliance, system compliance scores, and vulnerability reports to management and system stakeholders for review System Security Compliance Officer's shall conduct regularly scheduled reviews and audits on internal systems and propose plans to correct deficiencies. The individual shall implement approved fixes as coordinated with other department personnel. The hosting of third-party audits as required in order to maintain certifications and compliance certificates shall also be overseen by the individual. The System Security Compliance Officer develops, implements, maintains and oversees the enforcement of internal security policies and procedures.

Qualifications

The System Security Compliance Officer must have one of the following: CCNA-Security, GICSP, GSEC, Security+ CE or SSCP ( may be obtained after hire date ). Bachelor of Science degree with 2+ years of experience or Master of Science degree with 0+ years of experience or Associates degree with 6 + years of experience or High school diploma with 8+ years of experience

Abilities:

• Exposure to computer screens for an extended period of time.
• Sitting for extended periods of time.
• Reach by extending hands or arms in any direction.
• Have finger dexterity in order to manipulate objects with fingers rather than whole hands or arms, for example, using a keyboard.
• Listen to and understand information and ideas presented through spoken words and sentences.
• Communicate information and ideas in speaking so others will understand.
• Read and understand information and ideas presented in writing.
• Apply general rules to specific problems to produce answers that make sense.
• Identify and understand the speech of another person.