IT CYBERSECURITY SPECIALIST (INFOSEC)(T32) - Army National Guard Units

MILITARY REQUIREMENTS: This is an excepted service position that requires membership in a compatible military grade in the Alabama Army National Guard. Applicants who are not currently a member of the Alabama Army National Guard must be eligible for immediate membership. If you are not sure you are eligible for military membership, please contact an Alabama Army National Guard recruiter at 800-464-8273 prior to applying for this position. MINIMUM MILITARY RANK: CW2 MAXIMUM MILITARY RANK: CW4 THIS POSITION WILL BE FILLED AS AN INDEFINITE APPOINTMENT FOR AN UNSPECIFIED PERIOD OF TIME. THE INCUMBENT MAY BE TERMINATED UPON RECEIVING A 30 DAY NOTICE. SHOULD THIS POSITION BECOME PERMANENT, THE INDIVIDUAL MAY BE CONVERTED TO PERMANENT STATUS WITHOUT FURTHER COMPETITION (AND UPON RECOMMENDATION OF SUPERVISOR AND APPROVING AUTHORITY). EXPERIENCE REQUIREMENTS: Each applicant must fully substantiate (in his/her own words) that he/she meets the requirements of the Specialized Experience listed below: Otherwise, the applicant will be considered unqualified for this position. DO NOT COPY THE VACANCY ANNOUNCEMENT OR THE POSITION DESCRIPTION. DOING SO MAY RESULT IN DISQUALIFICATION FOR THE POSITION. GENERAL EXPERIENCE: Experience, education, and/or training that has provided a basic knowledge of data processing functions and general management principles that enabled the applicant to understand the stages required to automate a work process. Experience may have been gained in work such as computer operator or assistant, computer sales representative, program analyst, or other positions that required the use or adaptation of computer programs and systems. SPECIALIZED EXPERIENCE: 1-year specialized experience equivalent to at least the next lower grade. Experience in managing the function of the work to be performed. Experience which includes leading, directing and assigning work of personnel. KNOWLEDGE REQUIRED: -Mastery knowledge of the DoD architecture, applicable security controls, and mechanisms, both technical and procedural, to safeguard information systems and data. - Mastery knowledge in developing, implementing, and enforcing information security policies and standards within the organization. - Mastery knowledge in risk assessment methodologies, risk analysis, and the ability to identify and mitigate potential security risks to the organization's information systems. - Mastery knowledge in researching and understanding of relevant laws, regulations, and industry standards pertaining to information security, such as National Institute of Standards and Technology (NIST), DODI, Army regulations, Privacy act (PA), HIPAA, ISO 27001, etc. - Mastery knowledge in the most up-to-date vulnerabilities and the process of responding to and skill in managing security incidents, including incident detection, analysis, and mitigation. - Mastery knowledge in designing and implementing secure information systems, considering architecture, network security, and application security. - Mastery knowledge in the ability to develop and skill in implementing security awareness programs to educate employees about security policies and practices. - Mastery skill in conducting security audits and assessments to evaluate the effectiveness of security controls and compliance with policies. - Mastery knowledge of security technologies, such as firewalls, intrusion detection/prevention systems, encryption, authentication, and other security tools. - Mastery knowledge in the advanced principles of security governance, including the interrelationships of all IT specialties, their roles and responsibilities, reporting structures, and accountability. Mastery of skill in applying Information Security roles and responsibilities cohesively with counterparts within the organization. - Master skill in communicating complex security requirements, policies, and issues to various stakeholders within the organization. 1. Serves as the principle advisor to the CIO and the State on the latest industry and technological projections as they pertain to Cyber Security / Information Assurance for the network enclave infrastructure. Develops policies for organization deployed throughout the headquarters. Must anticipate the effects of new emerging technology and develop policies to control it to prevent security violations. Duties include oversight of the Army IT Training Program of Record and accreditation of all systems in-accordance-with (IAW) with all command, Army, and DoD security directives, policies and procedures. Ensures that all elements are in compliance with guidance concerning accreditation of automated information systems, risk management, control of computer viruses, and other similar issues.(30%) 2. Directs, manages, and monitors a system of internal controls that ensure effective and appropriate use of resources. A. Manage and lead the implementation of the RMF. Maintain and report Information Systems (IS) and Platform IT (PIT) systems assessment