Cyber Security Logistics Specialist SME II supporting Defense Health Agency Risk Management Executive Division initiatives. Responsibilities include documenting security responsibilities and leading self-assessments in cybersecurity contexts.
Responsibilities
Reviews and updates the Detailed Architecture Diagram, Detailed Hardware/Software Inventory, and other system artifacts to determine the DoD IT type.
Develops the baseline set of impact values (low, moderate, or high) for the medical devices.
Identifies common controls associated with the inherited controls in the Security Plan.
Documents responsibilities associated with the inherited controls in the Security Plan.
Initiates the tailoring process in eMASS to modify the control set to account for conditions affecting the specific system more closely.
Adds relevant supplemental security controls and marks extraneous or impertinent controls as 'Not Applicable'.
Identifies security controls to be monitored on an ongoing basis.
Reviews site/organization change control policies.
Documents the method of applying policies to specific controls.
Coordinates with the IV&V Team to clarify information required for Special Access Programs.
Leads the execution of the self-assessment activities.
Completes applicable checklists in assessing the NIST SP 800-53 Revision 4 controls.
Documents upload self-assessment checklist results and artifacts documentation in eMASS.
Provides support with remediation and mitigation efforts.
Creates the Risk Assessment Report.
Coordinates with the ISSM to confirm the completion of the Security Authorization Package prior to eMASS submission.
Assists program leadership with status reports, white papers, weekly activity report, and other ad hoc requirements as necessary.
Performs other job-related duties as assigned
Requirements
Bachelor’s Degree in Information Technology or Cybersecurity, or an equivalent combination of education and experience in lieu of a degree.
8 years of experience.
Federal government contracting experience required.
Must possess a Security+ or other IAT Level I, II / IAM Level I, II certification.
Ability to maintain an Active DoD Secret clearance.
Part - Time Security Officer safeguarding personnel and property at Kaman Air Vehicles. Providing access control, monitoring systems, and responding to incidents in Bloomfield, CT.
Security Officer responsible for maintaining a safe environment for clients and employees. Enforcing policies and responding to emergencies at the client's site.
Senior Security Advisor enhancing security measures to align with corporate objectives at Desjardins. Leading development of strategic initiatives and overseeing best practices in security.
Controls Professional assessing internal control frameworks at Barclays, improving control effectiveness and managing risks to ensure compliance with regulations.
Senior Information Security Engineer at Wells Fargo investigating insider threats and strengthening cybersecurity measures. Conducting advanced investigations and collaborating with cyber teams to mitigate risks.
Staff Product Manager overseeing enterprise security product strategy for Tenable. Collaborating with various teams to deliver customer - focused solutions and product features.
Information Systems Security Officer managing operational security posture for information systems at GDIT. Collaborating closely with ISSM and ISO, handling security aspects, and ensuring compliance with security standards.
Program Security Representative providing multi - discipline security support for Special Access Programs. Ensuring compliance, developing policies, and conducting security assessments in a military context.
Senior Cyber Security Project Manager at Airbus Protect managing medium complexity projects in Cyber Security Consulting. Focusing on project leadership and team management in diverse client settings.
Security Architect responsible for designing cloud security architectures for leading brands. Ensuring compliance and guiding incident response strategies in AWS environments.