Position Overview
System High Corporation delivers the most advanced protection and secrecy solutions to secure and strengthen critical missions, programs, operations, and intelligence activities. We are seeking an Information Assurance Lead to join our team to help contribute to our success and help us solve problems with innovation through intelligence. This position is being posted in anticipation of a contract award. We are actively interviewing qualified candidates now. Employment is contingent upon System High's successful award of the contract. If selected and the award is granted, you will be offered a start date aligned with contract execution.
The Information Assurance Lead duties include, but are not limited to the following:
- The Information Assurance Lead shall review information systems for compliance with applicable DCID, ICD, and CUSTOMER’S directives and guidance, and make recommendations to the USG.
- Provide IS security advice and guidance in accordance with applicable DCID, ICD, and CUSTOMER’S directives and guidance to Government and industry partners for the protection of data at all classification levels including SCI.
- Provide IS technical guidance and support in preparing responses for USG approval to A&A questions asked by Government and industry partners.
- Evaluate and recommend approval, disapproval, or waiver(s) for IS processing national security data at industry and/or Government facilities.
- Support CUSTOMER’S Security’s development and implementation of directives and guidance for CUSTOMER’S Information Assurance, Information Technology, and Information Management policies.
- Provide input to CUSTOMER’S for consideration in the promulgation of future CUSTOMER’S IS security policy.
- Support and/or conduct site visits and assessments to inspect and verify IS reports and plans at industrial and Government locations as approved by the cognizant COTR or site Government Point of Contact (GPOC) and provide a written report for review and approval by the Government.
- Prepare reports and memoranda, to include, but not limited to: Memoranda for the Record (MFR), Memoranda of Agreement (MOA), Authorization To Proceed, and status and technical briefs for review and approval by the Government.
- Update data and maintain Government-provided databases with current information about Government and industry IS status and representative contact information.
- Prepare, review, and record notification and status messages to indicate A&A state of systems to system owner or programs in a format approved by the Government.
- The contractor shall ensure that appropriate IS security requirements including applicable DCID, ICD, and CUSTOMER’S directives and guidance are addressed and applied and that appropriate documentation is prepared by the system owners or programs. The documentation will be contained in the Security Assessment Package, including, but not limited to the Concept of Operations (CONOPS) Plan, System Security Plans, System Requirements Traceability Matrix, Risk Management Matrix, Test Results, interface control documents, requests for changes, test plans, and other related program security documentation.
- Track completion of the Security Assessment Report (SAR).
- Support the preparation of the SAR, including, but not limited to, the Summary of Assessment results and Authorization Recommendation.
- Review, coordinate, and respond to IS security issues as requested by the Government.
- Perform short term (less than 90 days) CONUS and OCONUS travel to conduct site security inspections when approved by the COTR.
- Provide A&A support to the Government for the protection of special programs and tactical operations related activities.
- The contractor shall ensure these documents are reported via the Data Accession List (CDRL A008)