IT SPECIALIST (INFOSEC) - 890297900

Caecommunity; Mechanicsburg (Cumberland County); On-site; USD 70,000 - 100,000; Full time

Job summary

CAEcommunity is seeking qualified candidates to perform security analysis of IT activities, ensuring measures are enforced and remediation plans are in place for identified vulnerabilities. The role involves collecting RMF/A&A data and producing clear documentation and training materials.

Applicants should demonstrate proficiency in written and verbal communication and be capable of documenting program specifications and user support materials.

Qualifications

• Experience with RMF and A&A processes.
• Knowledge of DoD RMF documentation and assessments.

Responsibilities

• Providing security analysis of IT activities to ensure that appropriate security measures are in place and being enforced.
• Ensuring plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessment, audits, inspections, etc.
• Collecting and maintaining data needed to meet system cybersecurity reporting consisting of RMF, and Assessment and Authorization (A&A) process.
• Proficiency in communication, including listening, speaking, writing clear and concise functions documentation, program specifications, training and user support.

Skills

Security analysis

Documentation writing

Communication skills

Job description

GS 11:

• Providing security analysis of IT activities to ensure that appropriate security measures are in place and being enforced;
• Ensuring plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessment, audits, inspections, etc;
• Collecting and maintaining data needed to meet system cybersecurity reporting consisting of Risk Management Framework (RMF), and Assessment and Authorization (A&A) process;
• Proficiency in all forms of communication, including listening, speaking, expressing new ideas or difficult concepts; and writing in order to write clear and concise functions documentation, program specifications, training and user support.

GS 12:

• Applying information systems security principles and methods to evaluate, implement, and disseminate information systems security tools and procedures.
• Ensuring effective implementation of organizational information systems, security regulations, and policies and maintaining compliance with higher level requirements;
• Applying knowledge of the DoD Risk Management Framework (RMF), developing RMF documentation for customers, and providing technical review of assessment materials in support of organizational system and application authorization;
• Documenting the Assessment and Authorization (A&A) information in a comprehensive RMF package to include all of the information connected with the assessment of the Security Plan (SP);
• Executing test plans and Validation Procedures to obtain test results and advising the site or system owner of any issues;
• Recommending mitigation measures to reduce risk.

Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/ OR https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-b/ .

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.