Information Technology Specialist (INFOSEC)

Duties

Responsible for a wide range of complex assignments and projects relative to information systems and security matters.

Evaluates the security programs of an organization, including the implementation of security programs designed to anticipate, assess, and minimize system vulnerabilities such as intrusion detection or access authentication programs.

Serves as a principal contact for coordination, implementation, and enforcement of information security policies.

Makes recommendations for operational policies, procedures, and criteria for interfacing with program systems resources.

Coordinates with other IC and/or NIH staff on the development of information security system and application policies, guidelines, standards, requirements, and procedures.

Participates in Web based applications, network, and systems designs to ensure the implementation of systems security policies, guidelines and procedures, including initial design.

Participates in creating and maintaining system-security plans, contingency plans, risk assessments, and certification statements.

Provides expert advice and guidance to the software and database designers on how build secure Web enabled applications that comply with OMB, DHHS, and NIH policies on information system security.