Description

You will plan, direct, and coordinate information security activities for the agency. You own the development and enforcement of security policies, procedures, and controls to manage organizational risk.

Responsibilities

• Develop and enforce organizational security policies based on research and best practices.
• Implement security controls and devise countermeasures to mitigate risks to acceptable levels.
• Manage data security through encryption, access management, and transmission controls.
• Conduct technology assessments and document technical processes for security planning.
• Perform risk and vulnerability assessments aligned with management control families.

Required Skills

• 6 years of experience in information security or information assurance.
• Active Security+, CISSP, CISM, C-RISC, CISA, or SANS certification (2+ years holding one).
• Proficiency with Active Directory, Microsoft Azure, and Intune.
• Hands-on experience with AWS, including GuardDuty and IAM.
• Technical experience with SCCM for endpoint security.
• Knowledge of VPN, Firewalls, network monitoring, and intrusion detection.
• Understanding of TCP/IP, web server security, wireless security, and the CIA Triad.
• Bachelor's degree in Information Technology, Computer Science, Information Assurance, or a related field.

Preferred Skills

• Ability to prioritize multiple projects independently.

Key Skills

Education

Bachelor's degree