Description du poste
Defense Finance and Accounting Services (DFAS) mission is to lead the Department of Defense (DoD) in finance and accounting by ensuring the delivery of efficient, exceptional quality pay and financial information.
PRINCIPALES MISSIONS :
Assists with planning and execution of assessments of management, operational, and technical security controls to determine the extent the controls are implemented, operating, and producing the desired outcome relative to security requirements.
Evaluates the security posture of applications including all components within their boundary – DB/Web/App servers, interfaces, containers, on-prem/cloud/hybrid - against approved documentation, baselines, and configuration standards.
Assists with performance of risk analyses that consider threats, vulnerabilities, likelihood of occurrence, and potential impact, with particular emphasis on systems undergoing major changes, upgrades, or architectural modifications.
Analyzes information systems for compliance with IT security, resilience, and dependability requirements and verifies adherence to established configuration management and hardening guidelines.
Assists with development of security assessment plans, collects and evaluates assessment evidence, prepares formal findings and residual-risk reports, and supports continuous monitoring and remediation tracking activities.
QUALIFICATIONS REQUISES :
Resumes for federal government positions need more detailed work descriptions and accomplishments than a typical private sector resume. Please be sure to clearly describe the full scope of your work experiences in your resume. Basic Requirement: Applicants must have IT-related experience demonstrating the following competencies appropriate to, or above, the level of this position. Your resume and work experience should clearly support your ability to meet these competencies and will be evaluated as part of the entire application process. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to the Basic Competency Requirements listed above, one year of specialized experience equivalent in level of difficulty and responsibility to that of the next lower grade GS-11 in the federal service, which demonstrates the ability to perform the duties of the position, is required. Specialized experience is defined as applying risk-management principles to evaluate threats, vulnerabilities, and residual risk; developing or executing security assessment plans; documenting findings with supporting evidence; and recommending corrective actions; applying widely recognized cybersecurity frameworks and standards (for example, ISO 27001, NIST Cybersecurity Framework, COBIT, or equivalent) in assessment and continuous-monitoring activities. Preferred Certifications CCISO, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, CPTE, CySA+, FITSP-A, GCSA, GSLC, GSNA. Volunteer Experience: Experience refers to paid and unpaid experience, includin