McLaughlin Research Corporation has an opening for a full time

Information Systems Security Specialist

based at the NUWC Division Newport, RI. This position is contingent on award of a Government contract.

Duties and Responsibilities:

Conduct compliance checks for SCI accredited automated information systems to validate that they are operated, maintained, and disposed of in accordance with security policies and procedures.

Compile certificates and security and information systems forms from all special security Information System (IS) users and provide the certificates to the Government POC for final review and validation that the users have the requisite security clearances, authorization, need-to-know, and training to access such ISs.

On a daily basis, the ISSS shall report all security-related incidents pertaining to the special security information systems to the Command Special Security Information Systems Security Manager (ISSM).

The ISSS shall conduct periodic reviews of special security information systems to ensure compliance with the security authorization package.

Upon special security ISSM approval, the ISSS shall participate in and conduct research in support of hardware, software, and firmware reviews as a member of the Configuration Management Boards.

Shall submit any requests for changes or modifications to hardware, software, or firmware of a system to the ISSM and AO/DAO, prior to the change, for review and approval.

Upon notification of a system change that impacts system authorization the ISSS shall notify (e.g. via phone call, e-mail) the ISSM and AO/DAO in accordance with DoDI 8510 Risk Management Framework for Information Technology.

Shall monitor special security IS processes via user testing to ensure security features and procedures are functioning correctly, in accordance with AD 3.59, utilizing GFI 6.56.

Shall review all IS security-related documentation to ensure it is current and accessible to authorized individuals.

ISSS shall review audit records within the special security IS to review for compliance with information policies and to ensure that audit records are being collected. The contractor shall notify the ISSM if the audit records are not being collected or if there are identified compliance issues.

[]{style="box-sizing: border-

"}