_{08th January, 2025}

Role: Senior Information Security Specialist.
Location: ANG Component Enterprise Data Center (CEDC). Air Force, TN.
 
Security Clearance: Secret.
 
Job Description:
The Senior Information Security Specialist will provide critical support in protecting and securing the Air National Guard's (ANG) information systems.
 
This role requires a comprehensive understanding of cybersecurity policies, practices, and procedures, including risk management, security architecture, and incident response.

The specialist will ensure that security measures for information systems meet stringent compliance standards and will be instrumental in maintaining operational security posture.
 
Key Responsibilities:

• Develop, implement, and oversee comprehensive information security programs, including policies, procedures, and control systems, to ensure the integrity and confidentiality of sensitive information.
• Provide expert guidance on cybersecurity matters, including the interpretation and application of Air Force Instructions (AFIs), Defense Federal Acquisition Regulation Supplement (DFARS), and other relevant cybersecurity directives.
• Conduct security assessments and audits, identify vulnerabilities, and implement mitigation strategies to enhance the security posture of the ANG enterprise network.
• Ensure compliance with the Risk Management Framework (RMF) and support the attainment of Authorization to Operate (ATO) for systems.
• Collaborate with IT and cybersecurity teams to manage security incidents and breaches, including providing timely response and remediation actions.
• Assist in the development and maintenance of the Disaster Recovery Plan (DRP) and Continuity of Operations Plan (COOP).
• Support the implementation of security measures in accordance with the DoD Cybersecurity Workforce Qualification and Management Program.
• Provide training and guidance to staff on information security protocols and best practices.
• Maintain knowledge of current and emerging cybersecurity threats and trends to advise on security enhancements.
• Participate in the planning and execution of information security projects and initiatives, ensuring alignment with the ANG's strategic objectives.

• Ensures security of network infrastructure, developing protocols, and conducting assessments.
• Responds to incidents, and collaborates with engineers and managers for system security.
• Monitors and maintains network security, supporting projects with a security focus.
• Translates business needs into secure solutions, complying with standards.

• MA/MS degree in a relevant field/ Information Technology, Cybersecurity, Computer Science, or a related field; Master's degree preferred.
• Minimum of 10 years of experience in information security or cybersecurity roles within the DoD or a similar government agency.
• Relevant security certifications.
• Extensive knowledge of information security practices.
• Must possess all required licenses for operating NIPR and SIPRNet.
• IAM III certification based on job duties and access levels at CEDC McGhee-Tyson.         

• Relevant certifications such as CISSP, CISM, or GIAC are highly desirable.
• In-depth knowledge of information security frameworks, standards, and best practices, including NIST, RMF, and STIGs.
• Experience with DoD security regulations, policies, and procedures, including DFARS, DoDD, and DoDI requirements.
• Familiarity with security protocols related to identity management, access control, and encryption.
• Proven ability to manage complex security projects and work with cross-functional teams.
• Excellent communication, analytical, and problem-solving skills.