Cyber Security Logistics Specialist SME II supporting Defense Health Agency Risk Management Executive Division initiatives. Responsibilities include documenting security responsibilities and leading self-assessments in cybersecurity contexts.
Responsibilities
Reviews and updates the Detailed Architecture Diagram, Detailed Hardware/Software Inventory, and other system artifacts to determine the DoD IT type.
Develops the baseline set of impact values (low, moderate, or high) for the medical devices.
Identifies common controls associated with the inherited controls in the Security Plan.
Documents responsibilities associated with the inherited controls in the Security Plan.
Initiates the tailoring process in eMASS to modify the control set to account for conditions affecting the specific system more closely.
Adds relevant supplemental security controls and marks extraneous or impertinent controls as 'Not Applicable'.
Identifies security controls to be monitored on an ongoing basis.
Reviews site/organization change control policies.
Documents the method of applying policies to specific controls.
Coordinates with the IV&V Team to clarify information required for Special Access Programs.
Leads the execution of the self-assessment activities.
Completes applicable checklists in assessing the NIST SP 800-53 Revision 4 controls.
Documents upload self-assessment checklist results and artifacts documentation in eMASS.
Provides support with remediation and mitigation efforts.
Creates the Risk Assessment Report.
Coordinates with the ISSM to confirm the completion of the Security Authorization Package prior to eMASS submission.
Assists program leadership with status reports, white papers, weekly activity report, and other ad hoc requirements as necessary.
Performs other job-related duties as assigned
Requirements
Bachelor’s Degree in Information Technology or Cybersecurity, or an equivalent combination of education and experience in lieu of a degree.
8 years of experience.
Federal government contracting experience required.
Must possess a Security+ or other IAT Level I, II / IAM Level I, II certification.
Ability to maintain an Active DoD Secret clearance.
Senior Security Specialist ensuring compliance and security measures at Disney. Supporting audit processes and collaborating on risk assessments to enhance cybersecurity.
Risk Analyst supporting Keyloop’s Security Governance by managing information security risks. Identifying and monitoring risks while ensuring compliance with regulatory standards.
Cloud Security Engineer responsible for designing and implementing security controls for cloud environments at Keyloop. Ensuring secure adoption and compliance while working with platform and engineering teams.
IT Infrastructure & Security Engineer managing and developing network and server infrastructure at L - mobile. Collaborating on security measures and supporting internal audits in a hybrid role.
Cyber Security Consultant to deliver Wanstor’s security offerings and improve customer Cyber Security and Data Security. Involves consulting, implementation, and oversight of security measures.
Senior Manager in IT - Strategieberatung for Defense & Security, developing client relationships and growth strategies. Leading IT transformation projects in security - critical organizations.
Information Security Expert overseeing ISMS development and IT security compliance in Germany. Collaborates with management and leads regulatory requirements implementation.
IT Professional responsible for implementing innovative industrial IT solutions. Working in an agile environment while ensuring IT and OT security for production networks.
Security Compliance Specialist enhancing cybersecurity and compliance framework at Trezor. Collaborating across teams to shape security and compliance operations in the tech sector.