IT SPECIALIST (INFOSEC)

Summary

You will serve as a IT Specialist (INFOSEC) of NAVSUP BUSINESS SYSTEMS CENTER.

Duties

• •You will responsible for formulating effective implementation of organizational information systems security regulations and policies and maintaining compliance with higher level requirements.
• •You will develop RMF (Risk Management Framework) documentation for customers, and shall provide technical review of assessment materials in support of organizational system and application authorization.
• •You will support the Program Manager in the Assessment and Authorization (AA) Process.
• •You will develop Security Assessment Plan (SAP) Plan.

Qualifications

GS 11: I have one year of specialized experience equivalent to the next lower grade level (GS-09) or pay band in the federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: 1) Providing security analysis of IT activities to ensure that appropriate security measures are in place and being enforced; 2) Ensuring plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessment, audits, inspections, etc; 3) Collecting and maintaining data needed to meet system cybersecurity reporting consisting of Risk Management Framework (RMF), and Assessment and Authorization (A&A) process; 4) Proficiency in all forms of communication, including listening, speaking, expressing new ideas or difficult concepts; and writing in order to write clear and concise functions documentation, program specifications, training and user support. GS 12: I have one year of specialized experience equivalent to the next lower grade level (GS-11) or pay band in the federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: 1) Applying information systems security principles and methods to evaluate, implement, and disseminate information systems security tools and procedures. 2) Ensuring effective implementation of organizational information systems, security regulations, and policies and maintaining compliance with higher level requirements; 3) Applying knowledge of the DoD Risk Management Framework (RMF), developing RMF documentation for customers, and providing technical review of assessment materials in support of organizational system and application authorization; 4) Documenting the Assessment and Authorization (A&A) information in a comprehensive RMF package to include all of the information connected with the assessment of the Security Plan (SP); 5) Executing test plans and Validation Procedures to obtain test results and advising the site or system owner of any issues; and 6) Recommending mitigation measures to reduce risk. Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/ OR https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-b/ . Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.

Education

For the GS-11:In lieu of specialized experience listed in the qualifications section, applicants may qualify based on equivalent education, as follows: Ph.D. or equivalent doctoral degree OR 3 full years of progressively higher-level graduate education leading to a Ph.D. or equivalent doctoral degree.**A transcript must be submitted with your application if qualifying using education. See Required Documents for additional information.