As an Information Technology Specialist (INFOSEC), you will serve as a member of the Cybersecurity Assurance & Compliance (CA&C) Team in Washington, DC.Learn more about this agency
As an Information Technology Specialist (INFOSEC), you will:
- Conduct security control assessments for new and existing applications, systems, and programs, including evaluation of organizational policies, procedures, and security measures and provide recommendations to system stakeholders for appropriate mitigation techniques or strategies in support of risk acceptance decisions.
- Develop, update, maintain, implement, and provide guidance and support to stakeholders on standard operating procedures, processes, workflows, training materials, and other related documentation for the Cybersecurity Assurance & Compliance (CA&C) functions to integrate security in the System Development Life Cycle (SDLC) and strengthen confidentiality, integrity, and availability of OCC data and information systems.
- Support audit liaison function, working with Office of Inspector General (OIG) and internal audit teams on internal and external audit activities; performing audit quality assurance reviews on draft and final audit reports
- Assist in the implementation and maintenance of a continuous monitoring program including development and maintenance, POA&M, Risk Acceptance, and ongoing authorization processes and integration with the OCC’s governance, risk, and compliance tool, and other security tools to provide ongoing monitoring of security measures.
- Review all contractor deliverables to ensure accuracy and quality, including white papers, reports, assessment plans, briefings, memos, POA&Ms, testing workbooks, summary of findings, Standard Operating Procedures (SOPs), etc.
Occasional travel - Travel occasionally to attend training and/or conferences.
Job family (Series)
This job originated on www.usajobs.gov. For the full announcement and to apply, visit www.usajobs.gov/GetJob/ViewDetails/596253200. Only resumes submitted according to the instructions on the job announcement listed at www.usajobs.gov will be considered.