C

Chenega

Defense, intelligence, and federal staffing services

Intermediate Information Security Specialist

Security Governance, Risk & ComplianceUpdated on Nov 10
Full-timeArlington County, Arlington, VA, USA$81.7k - $109k /yr

About the Job

Requirements

  • A Bachelor of Arts or Bachelor of Science degree is required.
  • At least 5 years of experience in protected information environments such as SIPR, SAP, or JWICS is required.
  • IAM Level II certification in accordance with DoD 8570.01-M is required.
  • An active TS/SCI clearance is required.
  • Candidates must successfully pass background and drug screening.
  • Knowledge and experience with ICD 503 and the Government's assessment and authorization process are required.
  • Practical knowledge and application of the Enterprise Mission Assurance Support Service (eMASS) information system assessment and authorization tool are required.

Responsibilities

  • Develop and maintain knowledge of changing regulatory, threat, and technology landscapes to develop or maintain security policies and standards and ensure organizational compliance.
  • Provide technical support to the Army Intelligence Enterprise by identifying Cybersecurity requirements and specifications in accordance with Intelligence Community Directives and Standards; participating in staff assistance visits for data gathering; performing technical analysis; documenting Cybersecurity requirements; conducting studies and preparing evaluations about the feasibility of new technology; and analyzing customer requirements.
  • Assess Army Intelligence Enterprise information needs and develop the required documents.
  • Conduct daily independent research, analyze data, develop analyses of alternatives, and formulate recommendations for senior government leadership approval on Army Intelligence IT topics within the DoD and Intelligence Community.
  • Support the Authorizing Official and Program-Information Systems Security Manager with Risk Management Framework Assessment and Authorization efforts for the Army Intelligence Enterprise.
  • Review Risk Management Framework security packages, identify salient security issues, determine whether an agency system meets the applicable ICD 503 information security requirements, and recommend whether the system's residual risk is acceptable to the Government.
  • Provide input on Army Intelligence Enterprise modernization efforts, including Continuous Monitoring and Common Standardization.
  • Provide subject-matter-expert support on mission command and Army Intelligence Enterprise matters and participate in weekly working groups and bi-weekly councils.
  • Investigate and analyze Cybersecurity incident-response activities in the network environment or enclave; coordinate Cybersecurity sanitization and reporting; perform incident triage to determine scope, urgency, and potential impact; and track and document incidents from detection through resolution.
  • Maintain Cybersecurity documentation by collecting, consolidating, or generating required data and drafting documents in accordance with applicable DoD, Army, and Intelligence Community directives, instructions, regulations, or best practices.
  • Facilitate senior government leadership review and approval of updated or modified documents and maintain document configuration control.
  • Schedule and conduct initial introductory and applicable remedial Cybersecurity/Information Assurance awareness training for contractor, government, and military employees with access to ODCS, G-2 networks, in accordance with official guidance and the ODCS, G-2 Security Standard Operating Procedure.
  • Maintain and update ODCS, G-2 training materials to reflect changes in DoD, Army, and Intelligence Community Cybersecurity policy or information provided by the Information System Security Manager; review the materials annually with the Information System Security Manager and submit revisions for review and approval before publication.
  • Ensure ODCS, G-2 employee training records in the Army Training and Army Training Certification Tracking System replacement are current and reflect employee training status.
  • Manage or coordinate Army Training and Army Training Certification Tracking System unit records for G-2 information-system account holders in accordance with AR 25-2 and local requirements.
  • Coordinate G-2 information-system access with the Help Desk and applicable points of contact, and process DD Form 2875s to determine access eligibility across applicable domains for approval.
  • Assist the Information System Security Manager or conduct physical inspections of Automated Information Systems ready for end-of-life disposal in accordance with the ODCS, G-2 Security Standard Operating Procedure and Information System Security Manager guidance, coordinating with the hardware team.
  • Review ODCS, G-2 network and system configurations quarterly to ensure they can capture data required by DoD, Army, and Intelligence Community directives and standards.
  • Review operating systems, Active Directory, databases, hardware architecture, network devices, folder structures, and applications for compliance with DoD, Army, and Intelligence Community directives and standards.
  • Review and execute system configuration guidance and compliance checklists in accordance with Information System Security Manager instructions, using STIGViewer to review the Defense Information Systems Agency's latest Security Technical Implementation Guides or Security Requirements Guides for security compliance.
  • Manage the G-2 Army Data Auditing Management program, including training and tracking Observer, Operator, Custodian, and Approver roles; serve as Removable Media Custodian; and maintain documentation of removable-media transfers.
  • Perform other duties as assigned.

Desired Qualifications

  • ISC(2) Certified in Governance, Risk and Compliance (CGRC) or a comparable industry certification is preferred.
  • Experience working within the Army or Intelligence Community is preferred.

About the Company

Chenega

Defense, intelligence, and federal staffing services

Chenega is a government services contractor that supplies staffing and support services for defense, intelligence, and federal civilian customers, plus commercial clients. It operates across the United States, its territories, and several countries, tapping wide opportunities in government contracting. Its offerings center on staffing and mission support through various contracts, delivering qualified personnel and services to meet client needs. Unlike many industry players, Chenega is rooted in an Alaska Native village corporation, which shapes its ownership and community-focused approach while competing in a broad national market. The company’s goal is to help government and commercial customers execute their missions by providing reliable, professional personnel and services under contract.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Anchorage, AK
Founded
1974

Recently Posted Jobs

Explore more opportunities at Chenega

See more jobs