(490) Information Security/Cyber Security Policy Support

Information Security/Cyber Security Policy Support

Position Description

Collaborate routinely with DoD Chief Information Officer (CIO), Defense Information Systems Agency (DISA), Joint Staff (J6), United States Cyber Command, and other federal entities to ensure integration of DoD information assurance, cyber security, and information security policies. Provide monitoring support and recommendations on execution of requirements outlined in joint DoD CIO and USD(I) memorandum, “Cyber and Traditional Security Integration.” Track and ensure completion of reporting requirements detailed in joint DoD CIO and USD(I) memorandum, “Insider Threat Mitigation,” as well as follow-on Cyber-related Insider Threat mitigation initiatives.

Translate DoD information security policies and develop up to thirty-six technical implementation policies, guidance, and/or marking standards per year to support solutions and technologies for marking classified and controlled unclassified information. Integrate information security policies in the Joint Information Environment, Identity and Access Management, and the still- developing Unclassified Information Sharing Service architectures and systems.

Establish effective relationships to ensure the Unauthorized Disclosure Program Management Office aligns with post-WikiLeaks information assurance initiatives, particularly as they relate to driving out anonymity and determining attribution of responsible parties, enhancing enterprise audit capabilities, strengthening access controls, and supporting insider threat mitigation monitoring activities.

Location:  Arlington, VA (Pentagon) onsite daily

Responsibilities and/or Success Factors:

• Collaborate routinely with DoD Chief Information Officer (CIO), Defense Information Systems Agency (DISA), Joint Staff (J6), United States Cyber Command, and other federal entities to ensure integration of DoD information assurance, cyber security, and information security policies.
• Provide monitoring support and recommendations on execution of requirements outlined in joint DoD CIO and USD(I) memorandum, “Cyber and Traditional Security Integration.” Track and ensure completion of reporting requirements detailed in joint DoD CIO and USD(I) memorandum, “Insider Threat Mitigation,” as well as follow-on Cyber-related Insider Threat mitigation initiatives.
• Translate DoD information security policies and develop up to thirty-six technical implementation policies, guidance, and/or marking standards per year to support solutions and technologies for marking classified and controlled unclassified information. Integrate information security policies in the Joint Information Environment, Identity and Access Management, and the still-developing Unclassified Information Sharing Service architectures and systems.
• Establish effective relationships to ensure the Unauthorized Disclosure Program Management Office aligns with post-WikiLeaks information assurance initiatives, particularly as they relate to driving out anonymity and determining attribution of responsible parties, enhancing enterprise audit capabilities, strengthening access controls, and supporting insider threat mitigation monitoring activities.

Clearance:  Active TS/SCI Clearance

Minimum Qualifications:

• Associate's degree
• 5+ years of experience in information security, OSD, policy development, or related fields within the DoD
• Knowledge of DoD information security policies, including DoD CIO and USD(I) memoranda related to cyber and traditional security integration and insider threat mitigation.
• Experience collaborating with DoD entities such as the DoD CIO, DISA, Joint Staff (J6), and U.S. Cyber Command.
• Ability to develop and implement information security policies, guidance, and marking standards for classified and controlled unclassified information.
• Strong written and verbal communication skills to support policy translation and reporting.