See below for important information regarding this job. Position will be filled at any of the locations listed below. Site specific salary information as follows: Battle Creek, MI: $88,621 - $115,213 Columbus, OH: $92,475 - $120,222 Dayton, OH: $91,922- $119,504 Fort Belvoir, VA: $101,401- $131,826 New Cumberland, PA: $101,401- $131,826 Ogden, UT: $88,621 - $115,213 Philadelphia, PA: $97,653- $126,955 Richmond, VA: $92,573- $120,350
To qualify for an IT Specialist (INFOSEC) your resume and supporting documentation must support: A. Specialized Experience: One year of specialized experience that equipped you with the particular competencies to successfully perform the duties of the position, and is directly in or related to this position. To qualify at the GS-12 level, applicants must possess one year of specialized experience equivalent to the GS-11 level or equivalent under other pay systems in the Federal service, military or private sector. Applicants must meet eligibility requirements including time-in-grade (General Schedule (GS) positions only), time-after-competitive appointment, minimum qualifications, and any other regulatory requirements by the cut-off/closing date of the announcement. Creditable specialized experience includes: Provides customer support for identity and access management related activities. Manages access management through records management, account creation, account management, compliance with policy, and access removal. Develops and maintains access management policies and procedures, adhering to NIST, FISCAM, DoD, and STIG guidelines. Direct audit support: responsible to maintain and provide evidential matter, perform risk analysis, develop and perform compliance testing, create and monitor corrective action plans through completion, develop closure packages, perform continuous monitoring Participate in continuous process improvement, employing a variety of innovative technology capabilities. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
Provide DOD/DLA logistics system Program Management Offices and user base support through account management: establishment, account maintenance, IT system and application account monitoring, network rights and access management governance.
Use expert knowledge and critical thinking to resolve user access challenges and process requests. Communication is a result of multiple mechanisms such as ServiceNow, Email, Phone, Account Management Provisioning System.
Employs critical thinking, problem-solving skills, and IT innovative technology capabilities to perform testing and ensure adherence to critical access controls.
Participate in development and maintenance of authoritative policies and procedures, reflecting the legislative intent of the application Information Assurance (IA) laws and regulations.
Act as the subject matter expert for DLA Enterprise access control audit functions, provide expert support for DLA audited applications. Audit functions include but not limited to Financial Statement Audit (Functional)...
... Financial Statement Audit (Information Technology), Service Provider (SSAE18 (SOC1)) Statement of Assurance, IT General Controls testing, Control Observation (CO) and Notice of finding and Recommendation (NFR) remediation and monitoring...
...attend access control audit discussions (DLA internal/Independent Public Auditor (IPA) participants), collect evidence, analyze data, and generate reports used for managing IT systems/applications and satisfy audit requirements
Analyze and determine the impact of new or revised plans and policies on the current IA programs and operations for actual or potential effectiveness in achieving planned goals and objectives.
Evaluate new policies and procedures to ensure compliance with NIST, FISCAM, DoD, DISA STIG, and local DLA policies.
Any additional duties as assigned.