Cybersecurity Policy Support Specialist

Overview

Nakupuna Solutions is seeking a Cybersecurity Policy Support Specialist to support the Army Command, Control, Communications, Computers, Intelligence, Surveillance and Reconnaissance (C5ISR) Center Headquarters at Aberdeen Proving Ground (APG), Maryland. This position will provide cybersecurity support that may include the development, maintenance, consolidation, audit readiness, compliance, and tracking of all artifacts required to maintain compliance with the C5ISR Center information system authorizations such as the Risk Management Framework (RMF); DoD IA Certification and Accreditation Process; and Federal Information Security Management Act. This position will also provide information security engineering support to the applications, application software development network, and the laboratory network backbone and servers.

Responsibilities

The following duties reflect management's definition of essential functions for this job but do not restrict the tasks that might be assigned. Management may assign additional duties and responsibilities at any time due to reasonable accommodation or other reasons:

• Maintain and review all supporting documentation associated with the RMF and cybersecurity/IT policies in the organization, including individual diverse system specific documentation.
• Provide guidance, interpret policy, and support C5ISR Center information system owners (ISO) and ISO staff responsible for executing an Assess-only or Assess and Authorize package for a C5ISR Center owned system.
• Assist in managing the organizational policies and procedures which support cybersecurity. This includes, but is not limited to: IT procurement (including IT approval system waiver submission and monitoring), outside contiguous United States IT travel, and Army data center consolidation planning, RMF package/control review, user duty appointment orders, and workforce training and compliance oversight.
• Develop, maintain, and disseminate policies including: network operations security policies; network security policies; hardware lists and templates; software lists and templates; privileged user lists and templates; ports, protocols, and services lists and templates; data flow diagrams; network diagrams; and all other artifacts required to maintain compliance with the authorizations of the C5ISR Center Information Systems.
• Develop, maintain, consolidate, audit, and track all documentation in support of data requests and portfolio registrations including: the Army Portfolio Management System and DISA Enterprise Mission Assurance Support Services.
• Provide documentation required in support of approvals and certifications to include, but not limited to: Risk Management Framework; Certificate of Net worthiness; Ports, Protocols, and Services Management (PPSM); Data in Transit; Data at Rest; DoD Investment Review Board; Security Impact Analysis, and Privacy Impact Assessments.
• Provide documentation required in support of approvals and certifications to include, but not limited to: DoDI 5400.16, DoDI 8500.01, DoDI 8510.01, DoDI 8520.2, DoDI 8551.1, AR 25-1, and AR 25-2. This includes, but is not limited to: interconnection agreements; Defense Information System Network (DISN) circuits; PPSM; and data in transit.
• Monitor, claim, update, and complete customer requests through the CIO Portal ticketing system by gathering information, conducting research, and corresponding with customers as required.

Qualifications

Skills/Qualifications: 

 

IAT Level II or IAM Level I in accordance with DoD 8570.01 M (Security+ CE or equivalent as specified in DoD 8570.01 M).Full list of valid certifications (any 1 required): CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CAP, CND, Cloud+, GSLC, HCISPP

 

Education and Experience: Bachelor's Degree and 7+ years of experience desired. 

 

Clearance Requirements: This position requires an active SECRET security clearance. Must be a U.S. citizen.

 

Physical Requirements: The ideal candidate must at a minimum be able to meet the following physical requirements of the job with or without a reasonable accommodation:

• Ability to perform repetitive motions with the hands, wrists, and fingers.
• Ability to engage in and follow audible communications in emergency situations.
• Ability to sit for prolonged periods at a desk and working on a computer.

The Nakupuna Companies use a market-based compensation strategy to ensure that our employees are compensated within applicable market ranges commensurate with multiple factors, including but not limited to the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as cont