(590) Information Security Specialist III

<div class="content-intro"><p><strong>Company Summary</strong></p> <p>Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future.&nbsp;</p></div><p><strong>Position Description: <br></strong>The Information Security Specialist III supports the National Oceanic and Atmospheric Administration (NOAA) Internal Risk Management Program (IRMP), providing advanced technical, analytical, and programmatic expertise in the prevention, detection, and mitigation of insider threats. This key personnel position executes and advances NOAA’s IRMP objectives in compliance with federal security regulations, most notably Executive Order 13587, National Insider Threat Policy, NIST, FISMA, NSPM-33, and agency-specific guidance. The Information Security Specialist III collaborates with OCIO leadership, the Internal Risk Office, NOAA research teams, and interagency insider threat task forces to strengthen the security posture of NOAA’s classified and unclassified environments.<br><br><br><strong>Location:</strong>&nbsp; Hybrid (Silver Spring, MD)<br><br></p> <p><strong>Clearance:&nbsp;</strong> Active TS/SCI<br><br></p> <p><strong>Responsibilities and/or Success Factors: </strong><span style="text-decoration: underline;">Information Security Program Development and Implementation </span></p> <ul> <li>Lead the development and implementation of comprehensive information security policies, procedures, and protocols for insider threat detection and mitigation&nbsp;</li> <li>Design and establish security frameworks that integrate physical security, personnel security, cybersecurity, and information assurance functions&nbsp;</li> <li>Develop research security protocols in compliance with NSPM-33 to protect sensitive NOAA research activities from internal and external threats&nbsp;</li> <li>Create and maintain security guidelines for handling classified national security information (CNSI) and controlled unclassified information (CUI) Risk Assessment and Analysis&nbsp;</li> <li>Conduct comprehensive risk assessments of NOAA's information systems, networks, and data repositories&nbsp;</li> <li>&nbsp;An