IT SPECIALIST (INFOSEC)

Security And Privacy Controls

The candidate selected for this position will:

• Select security and privacy controls. Provide recommendations to the Authorizing Official regarding said controls. Ensure that system security plans and related security artifacts are developed, reviewed annually and updated as required. Serve as principal advisor to the Authorizing Official and System Owner on all matters involving controls for systems.
• Perform detailed review and analysis of Office of Management and Budget (OMB) regulations, Department of Homeland Security (DHS) Binding Operational Directives, Federal Information Processing Standards, and National Institute of Standards and Technology (NIST) implementation guidance.
• Define security requirements and assess proposed new technologies and solution systems for Federal Information Security Management Act (FISMA) compliance. Ensure security engineering principles are considered during design activities. Ensure managed and cloud-based IT services are evaluated and selected in compliance with Federal Risk and Authorization Management Program (FedRAMP) requirements.
• Select and oversee integration of security tools into the network infrastructure. Establish and manage operation of a Security Operations Center (SOC) to monitor security tools and perform near real time analysis of security events of interest.
• Provide recommendations to senior leadership regarding the establishment of new fundamental concepts and criteria.