Description

You will plan, direct, and coordinate information security activities for the agency, owning the development and enforcement of security policies and controls to manage organizational risk.

Responsibilities

• Develop and enforce organizational security policies based on research and industry best practices.
• Implement security controls and devise countermeasures to mitigate risks to acceptable levels.
• Manage data security through encryption, access management, and transmission controls.
• Conduct technology assessments and perform risk and vulnerability assessments aligned with management control families.
• Document technical processes for security planning and compliance.

Required Skills

• 6 years of experience in information security or information assurance.
• Active Security+, CISSP, CISM, C-RISC, CISA, or SANS certification (held for 2+ years).
• Proficiency with Active Directory, Microsoft Azure, and Intune.
• Hands-on experience with AWS, specifically GuardDuty and IAM.
• Technical experience with SCCM for endpoint security.
• Knowledge of VPN, Firewalls, network monitoring, and intrusion detection.
• Understanding of TCP/IP, web server security, wireless security, and the CIA Triad.
• Bachelor's degree in Information Technology, Computer Science, Information Assurance, or a related field.

Key Skills

Education

Bachelor's degree