Cybersecurity Policy & Risk Specialist (INFOSEC)

Naval Air Warfare Center Training Systems Division (NAWCTSD); Ridgecrest (CA); On-site; USD 71,000 - 160,000; Full time

Job summary

NAWCTSD in Ridgecrest, California seeks a cybersecurity professional to develop and implement policies ensuring information systems reliability and protection against unauthorized access across networks and data.

You will conduct risk assessments, support incident response, liaise with ISSM, and collaborate across the Cyber Security Directorate to maintain certification, accreditation, and disaster recovery procedures in accordance with DoD standards.

Responsibilities

• Develop policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goals.
• Conduct systems security evaluations, audits, and reviews
• May serve as member of the Change Control Board (CCB).
• Develop systems security contingency plans and disaster recovery procedures.
• Collaborate with the Information Systems Security Manager (ISSM) to develop policies and procedures to ensure information systems’ reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Develop and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Complete network and systems design to ensure implementation of appropriate systems security policies.
• Assess security events to determine impact and implement corrective actions.
• Ensuring the rigorous application of information security/information assurance policies, principles, and practices in the delivery of all IT services.
• Monitor system recovery processes to ensure security features and procedures are properly restored and function correctly.
• Ensure audit records are collected, reviewed, and documented (to include any anomalies).
• Communicate and collaborate with the Command ISSM (CISSM) and Command Security Manager in areas of mutual interest and impact.
• In collaboration of the program ISSM, maintain a repository for all cybersecurity-related documentation, i.e. Cybersecurity Workforce (CSWF) management and tracking, Certification and Accreditation (C&A), and Computer Network Defense (CND).
• Coordinate any cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations
• Ensure implementation of IS security measures and procedures, including reporting incidents to the ISSM or CISSM, Authorizing Official (AO) and appropriate reporting chains and coordinating system-level responses to unauthorized disclosures in accordance with DoD Manual 5200.01, "DoD Information Security Program," February 24, 2012.
• Ensure that any cybersecurity-related events or configuration changes that may affect the system authorization or security posture of the IS are formally reported to the ISSM/CISSM and/or AO and other affected parties.
• Ensure that the handling of possible or actual data spills are conducted in accordance with organizational policy.
• In collaboration with the ISSM, maintain the organizations cybersecurity program that includes cybersecurity architecture, requirements, objectives and policies, cybersecurity personnel, and cybersecurity processes and procedures in direct collaboration with the Cyber Security Directorate (CSD).

Job description

• Develop policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goals.
• Conduct systems security evaluations, audits, and reviews
• May serve as member of the Change Control Board (CCB).
• Develop systems security contingency plans and disaster recovery procedures.
• Collaborate with the Information Systems Security Manager (ISSM) to develop policies and procedures to ensure information systems’ reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Develop and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Complete network and systems design to ensure implementation of appropriate systems security policies.
• Assess security events to determine impact and implement corrective actions.
• Ensuring the rigorous application of information security/information assurance policies, principles, and practices in the delivery of all IT services.
• Monitor system recovery processes to ensure security features and procedures are properly restored and function correctly.
• Ensure audit records are collected, reviewed, and documented (to include any anomalies).
• Communicate and collaborate with the Command ISSM (CISSM) and Command Security Manager in areas of mutual interest and impact.
• In collaboration of the program ISSM, maintain a repository for all cybersecurity-related documentation, i.e. Cybersecurity Workforce (CSWF) management and tracking, Certification and Accreditation (C&A), and Computer Network Defense (CND).
• Coordinate any cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations
• Ensure implementation of IS security measures and procedures, including reporting incidents to the ISSM or CISSM, Authorizing Official (AO) and appropriate reporting chains and coordinating system-level responses to unauthorized disclosures in accordance with DoD Manual 5200.01, "DoD Information Security Program," February 24, 2012.
• Ensure that any cybersecurity-related events or configuration changes that may affect the system authorization or security posture of the IS are formally reported to the ISSM/CISSM and/or AO and other affected parties.
  
  

Position Description

• Develop policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goals.
• Conduct systems security evaluations, audits, and reviews
• May serve as member of the Change Control Board (CCB).
• Develop systems security contingency plans and disaster recovery procedures.
• Collaborate with the Information Systems Security Manager (ISSM) to develop policies and procedures to ensure information systems’ reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Develop and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Complete network and systems design to ensure implementation of appropriate systems security policies.
• Assess security events to determine impact and implement corrective actions.
• Ensuring the rigorous application of information security/information assurance policies, principles, and practices in the delivery of all IT services.
• Monitor system recovery processes to ensure security features and procedures are properly restored and function correctly.
• Ensure audit records are collected, reviewed, and documented (to include any anomalies).
• Communicate and collaborate with the Command ISSM (CISSM) and Command Security Manager in areas of mutual interest and impact.
• In collaboration of the program ISSM, maintain a repository for all cybersecurity-related documentation, i.e. Cybersecurity Workforce (CSWF) management and tracking, Certification and Accreditation (C&A), and Computer Network Defense (CND).
• Coordinate any cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations
• Ensure implementation of IS security measures and procedures, including reporting incidents to the ISSM or CISSM, Authorizing Official (AO) and appropriate reporting chains and coordinating system-level responses to unauthorized disclosures in accordance with DoD Manual 5200.01, "DoD Information Security Program," February 24, 2012.
• Ensure that any cybersecurity-related events or configuration changes that may affect the system authorization or security posture of the IS are formally reported to the ISSM/CISSM and/or AO and other affected parties.
  
  

Ensure that the handling of possible or actual data spills are conducted in accordance with organizational policy.

• In collaboration with the ISSM, maintain the organizations cybersecurity program that includes cybersecurity architecture, requirements, objectives and policies, cybersecurity personnel, and cybersecurity processes and procedures in direct collaboration with the Cyber Security Directorate (CSD).
  
  

Minimum Salary

$71,244

Maximum Salary

$159,716