IT Cybersecurity Specialist (Infosec)

Defense Finance and Accounting Service•Indianapolis, IN

About The Position

The IT Cybersecurity Specialist (INFOSEC) ensures the integrity of information assurance and information security functions and requirements for designated systems in an operational environment. The role may perform Information System Security Manager (ISSM) duties, implementing and enforcing Department of Defense information system IA policies and procedures for IT applications, or Information System Security Officer (ISSO) duties, assisting the ISSM. The specialist implements and enforces cybersecurity policies and procedures set out in cybersecurity-related documentation; reviews system and software lifecycle management procedures; ensures security best practices are current and included; and provides guidance on the Risk Management Framework (RMF). The position oversees information-system security certification and accreditation, develops local risk-assessment policies and strategies for special requirements, and serves as an IA point of contact for internal and external audit organizations, coordinating and supporting audits concerning security standards and requirements for automated information systems. The position is a federal national-security role that may require access to classified information and a favorable suitability review and security determination. Occasional travel is required. Moving expenses will be paid. Telework is limited and available only rarely on a case-by-case basis when Agency Leadership determines it serves a compelling DoD need. The role may be subject to a one-year probationary period. Applicants must meet the stated citizenship, security, federal-service, and specialized-experience requirements.

Requirements

U.S. citizenship.
Favorable suitability review and security clearance/security determination as a condition of employment; maintain security eligibility. The position may require access to classified information and may require a Secret clearance or higher, depending on the position.
Register for Selective Service if male and born after December 31, 1959.
Be suitable for Federal employment.
For candidates with a latest competitive appointment in Federal service, have served at least three months after that appointment.
Complete DoD 8140 Foundational Qualifications within nine months and Residential Qualification requirements within 12 months.
Successfully pass the E-Verify employment verification check as a new DFAS employee.
Demonstrate IT-related experience in attention to detail, customer service, oral communication, and problem solving at a level appropriate to the position.
Have one year of specialized experience equivalent to the next lower Federal grade (GS-11), evaluating, maintaining, implementing, and deploying information-systems security tools, applications, and software; interpreting contingency-planning documents and IA policies and procedures; developing, implementing, and coordinating activities to protect IT systems, services, and software; and monitoring and evaluating system and software compliance with IT security requirements.
Meet the specialized-experience, 90-day-after-competitive-appointment, and other qualification requirements within 30 calendar days after the announcement closing date, unless otherwise indicated.
Education cannot substitute for specialized experience at this grade level.
May be required to serve a one-year probationary period.

Responsibilities

Ensure the integrity of IA/INFOSEC functions and requirements for designated systems in an operational environment.
Implement and enforce DoD information-system IA policies and procedures for IT applications in ISSM duties, or assist the ISSM in meeting those duties in ISSO duties.
Implement and enforce cybersecurity policies and procedures defined in cybersecurity-related documentation.
Review system and software lifecycle management procedures, ensure security best practices are updated and included, and provide RMF assistance and guidance.
Oversee security certification and accreditation of information systems.
Develop local risk-assessment policies and risk-assessment strategies to meet special requirements.
Serve as an IA point of contact for internal and external audit organizations and provide audit assistance, support, and coordination relating to security standards and requirements for automated information systems.