Management Systems Senior Specialist

To apply for this position, please visit http://www.gdeb.com/employment.  Search for job number 08-1958.The ISS shall have oversight and responsibility for the development, implementation, and evaluation of the facility's Information Security Program. The ISS shall conduct risk assessments on proposed classified Information Systems (IS) to determine the proper Protection Level for the IS, and identify any vulnerabilities that would need mitigation. The ISS will be responsible to management for maintaining a positive and pro active security posture within the Information Assurance Workforce. The ISS shall prepare, implement, and maintain Certification and Accreditation documentation to support the facility's classified Information Systems through their entire Life Cycle. The ISS shall indirectly manage ISSO's for multiple accredited IS. The ISS will determine the responsibilities to be assigned to the ISSO, and ensure they are properly trained commensurate to the complexity of the Information System they are responsible for. This ISSM position will be reasonable for the following: Ensure the development, documentation, and presentation of IS security education, awareness, and training activities for facility management, IS personnel, users and other, as appropriate. Establishes, documents, implements, and monitors the IS Security Program and related procedures for the facility and ensures facility compliance with requirements for IS. Identifies and documents unique local threats/vulnerabilities to IS. Coordinates the facility IS Security Program with other facility security programs. Ensures that periodic self-inspections of the facility's IS Program are conducted as part of the overall facility self-inspection program and that corrective action is taken for all identified findings and vulnerabilities. Self-inspections are to ensure that the IS is operating as accredited and that accreditation conditions have not changed. Ensures the development of facility procedures to: 1. Govern marking, handling, controlling, removing, transportation, sanitizing, reusing, and destroying media and equipment containing classified information. 2. Properly implement vendor supplied authentication (password, account names) features or security-relevant features. 3. Report IS security incidents to the CSA. Ensure proper protection or corrective measures have been taken when an incidents/vulnerability has been discovered. 4. Require that each IS user sign an acknowledgement of responsibility for the security of the IS. 5. Implement security features for the detection malicious code, viruses, and intruders (hackers), as appropriate. Certifies to the CSA, in writing, that watch System Security Plan (SSP) has been implemented; that the specified security controls are in place and properly tested; and that the IS is functioning as described in the SSP. Ensures notification of the CSA when an IS no longer processes classified information, or when changes occur that might effect accreditation. Ensures that personnel are trained in the IS's prescribed security restrictions and safeguards before they are initially allowed to access a system. Develops and implements general and remote maintenance procedures based on requirements provided. CISSP or CISM Certification. Strong understanding of Protection Levels and Level-of-Concern for Information Systems as outlined in NISPOM Chapter 8 and Director of Central Intelligence Directive (DCID) Manual 6/3. Demonstrated ability to work independent of close supervision. Working knowledge of computer Operating System to include, but not limited to: Windows NT, 2000, and XP, and Solaris-Linus (UNIX) OS, as well as system functions, security policies, technical safeguards, and operational security measures. Excellent communication, interpersonal, and team building skills. Ability to troubleshoot technical configurations and make recommendations on the protection of classified and sensitive data. Must be a US citizen.Required Education/Training:Bachelor Degree or equivalent experience in Information Systems Security. Desired Experience:Five to ten years in Information Systems Security. Two years experience in Information Technology/Security or equivalent technical work experience. Demonstrated experience with Microsoft Office Professional Suite. Practical experience with implementing technical assurances required for an Information System to receive accreditation under NISPOM Chapter 8.Additional Requirements:Active Top Secret with current SSBI and SCI access eligibility is required.