Information Systems Security Specialist

Duties & Responsibilities

Conduct compliance checks for SCI accredited automated information systems to validate that they are operated, maintained, and disposed of in accordance with security policies and procedures.

Compile certificates and security and information systems forms from all special security Information System (IS) users and provide the certificates to the Government POC for final review and validation that the users have the requisite security clearances, authorization, need-to-know, and training to access such ISs.

A daily basis, the ISSS shall report all security-related incidents pertaining to the special security information systems to the Command Special Security Information Systems Security Manager (ISSM).

The ISSS shall conduct periodic reviews of special security information systems to ensure compliance with the security authorization package.

Upon special security ISSM approval, the ISSS shall participate in and conduct research in support of hardware, software, and firmware reviews as a member of the Configuration Management Boards.

Submit any requests for changes or modifications to hardware, software, or firmware of a system to the ISSM and AO/DAO, prior to the change, for review and approval.

Upon notification of a system change that impacts system authorization, the ISSS shall notify (e.g. via phone call, e-mail) the ISSM and AO/DAO in accordance with DoDI 8510.01 Risk Management Framework for Information Technology.

Monitor special security IS processes via user testing to ensure security features and procedures are functioning correctly, in accordance with AD 3.59, utilizing GFI 6.56.

Review all IS security-related documentation to ensure it is current and accessible to authorized individuals.

The ISSS shall review audit records within the special security IS to review for compliance with information policies and to ensure that audit records are being collected.

The contractor shall notify the ISSM if the audit records are not being collected or if there are identified compliance issues.

Communications Security (COMSEC) Support

• Fill COMSEC keying materials into COMSEC equipment.
• Perform software or firmware updates on COMSEC equipment.
• Sign as a witness for issuing COMSEC materials.

Knowledge, Skills And Abilities (KSAs)

Demonstrated knowledge, experience, and proficiency in working with CNSI to include Sensitive Compartmented Information (SCI).

Demonstrated knowledge, experience, and proficiency utilizing Information Systems CNSI, CNSI and SCI policies, CNSI and SCI instructions, CNSI and SCI regulations, and CNSI and SCI procedures.

Required General Experience

• IAM Level I certificate in accordance with DODM 8140.01.
• Familiarity and experience in DoDI 8510.01 Risk Management Framework for Information Technology (IT).

Minimum Education

Bachelor's degree in Cybersecurity technical discipline.