Description du poste
Join the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Cybersecurity Specialist, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families.
PRINCIPALES MISSIONS :
Provides expert security advice and consultation in the implementation and risk management of IT networks, systems, and devices to ensure controlled accessibility and security compliance, as well as prevent and defend against unauthorized access to systems, networks, and data. Administers and monitors the division's implementation of the Risk Management Framework (RMF) steps and activities throughout system life cycle. Ensures the confidentiality, integrity, and availability of networks, systems, devices, and data through the planning, analysis, development, implementation, maintenance and enhancement of information systems security program policies, procedures, and tools. Uses data collected from a variety of cyber defense tools to analyze events that occur within their environments for the purposes of mitigating threats. Assists in the implementation of programs to ensure the safeguarding of systems, networks, and devices, and data users are aware of, understand, and adhere to systems security policies and procedures. Supports the implementation of information technology (IT) security controls, security authorization documents, and participates in system audits. Leads teams in conducting comprehensive program studies and evaluations to assure the continuous operations of IT networks/systems/devices and adherence to established Federal regulations and VA policies and procedures to prevent unauthorized access and data compromise. Investigates cyber security incidents for IT networks, systems, and devices to identify possible break of security policies and/or other violations. Establishes and implements enterprise research cybersecurity programs that support unique and complex research projects and collaborative studies. Conduct risk assessments for all VA/VHA network connected medical devices and associated healthcare systems, medical security boundaries, and Special Purpose Systems. This position is primarily aligned to the following NICE Cybersecurity Workforce Framework work roles: 722: Information Systems Security Manager: Responsible for the cybersecurity of a program, organization, system, or enclave. 805: IT Program Auditor: Conducts system, network, and device security control assessments, audits, and reviews, and develops security contingency, disaster recovery, and cybersecurity incident response plans and procedures. 511: Cyber Defense Analyst: Uses data collected from a variety of cyber defense tools to analyze events that occur within their environments for the purposes of migrating threats. For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.cisa.gov/tools/cyber-career-pathways-tool Position Description/PD#: IT Cybersecurity Specialist (INFOSEC)/PD17918A Work Schedule: Monday - Friday; 8:00am-4:30pm Compressed/Flexible: As determined by the Agency Policy. Telework: ADHOC/Situational. Virtual: This is not a virtual position. Remote: This is not a remote position. Relocation/Recruitment Incentives: Not authorized. Permanent Change of Station (PCS): Not authorized. Travel Required: 25% or less. Bargaining Unit: No Physical Demands: The work is sedentary. Some work may require walking and standing in conjunction with travel and to attendance at meetings and conferences away from