Overview
Full time Technology Protection Manager to work with the OSD Joint Hypersonics Transition Office (JHTO). This candidate will be responsible for implementing and enforcing adherence to best practices to protect critical technical information generated by office science and technology efforts. The individual will be the organizational lead for all security-related issues but primarily technology and information protection.
Responsibilities
Develop data security policies using data security standards, guidelines, and requirements that include privacy, authentication, access control, retention, disposal, incident management, disaster recovery, and configuration.
Review documentation for adherence to proper classification and controlled unclassified information markings.
Review and maintain knowledge of all applicable security classification guides.
Develop sensitive data collection and management procedures in accordance with requirements.
Develop and document processes, procedures, and guidelines for complying with protection requirements (e.g., e-mail labels, media labels, etc.), control procedures (e.g., discretionary access control, need-to-know sharing, etc.), incident management reporting, remote access requirements, system management and use of encryption.
Assess the effectiveness of data security policies, processes, and procedures against established Departmental directives and applicable requirements.
Review alleged violations of data security and privacy breaches. Identify improvement actions required to maintain the appropriate level of data protection
Document and manage processes for information security plan(s)
Education/Qualifications
Must have an active DoD Secret Security Clearance or above
Bachelor's degree in computer science, Management Information Systems, or related fields
An equivalent combination of education; technical certifications or technical school training will be considered
Prior experience as a Security Manager with a minimum of 3 years of relevant work experience
Experience developing data security policies using data security standards, guidelines, and requirements that include privacy, authentication, access control, retention, disposal, incident management, disaster recovery, and configuration.
Understanding and experience with cybersecurity measures (tools, processes, etc.) to ensure safeguarding data and providing for safe computing
Ability to develop and document processes and procedures for end users
ID2022-5183
CategoryIT
TypeRegular Full-Time
Location : LocationUS-VA-Arlington
TelecommuteNo
Clearance RequirementsSecret
