Data Security Supervisor jobs in Washington

• Perform as a trusted advisor to the System Owner.
• Write a brief security strategy for each information system for the office and update annually, as needed.
• Advise the System Owner/System Owner Representative as the principal IT security advisor on all matters involving the security of an information system.
• Perform a security impact analysis of all proposed changes and configuration management de cisions, which have impact on system security.
• Recommend alternate system architecture(s) for improved security.
• Communicate the need to understand COO IT security policies and provides feedback to shape our policies
• Gather system security information to fill out ITSO's defined IT scorecard, annually, and review the scorecard periodically.
• Establish and execute the system's continuous monitoring program, including identifying the con trolls, approving the test methodology and reporting processes, and coordinating with stakeholders on its implementation.
• Ensure that systems comply with AO Manual, department, and program office security policies, and the Guide to Judiciary Policy.
• Identify and document security requirements for proposed new systems.
• Perform security review for proposed new systems.
• Prepare and present briefings as a security Subject Matter Expert (SME) as required.

• Manage and report on AOUSC IT security risks to information assets to ensure that:
• Identified risks are addressed in a timely manner.
• Risk status is tracked until risk is reduced to an acceptable level
• Create/update Plans of Action & Milestones (POA&Ms)
• Create/update Exception Request Forms (ERFs)
• Create/update Risk Acceptance Memos (RAMs) and manages the renewals, as needed.
• Create/update Risk Mitigation Plans (RMPs)
• Gather documentation in support of remediation/mitigation.
• Appropriately update the current system of record (e.g., CSAM) with remediation/mitigation information

• Expert in-depth knowledge of computer hardware, software, networks
• Expert in-depth knowledge of theories, principles, practices, and techniques of data communications and network management, traffic, and security
• Strong understanding of IT security best practices, and demonstrated ability to analyze, design, and implement security policies and procedures.
• Knowledge of anti-malware and endpoint security controls.
• Knowledge of IPSec and the ability to use it to protect data, voice, and video traffic
• Experience designing security architecture roadmaps
• Excellent written, oral, and interpersonal skills
• Ability to work independently and in a team environment as well as the ability to handle multiple projects and conflicting priorities within strict deadlines

• 3 years of experience as an ISSO (preferably for the federal government.)
• 5 years collaborating and reviewing System Security Plans (SSPs), Security Assessment Reports (SARs),
• 3 years of experience with Risk Management Framework (RMF), NIST, FISMA compliance
• 5 years of experience with Application Security testing suites and tools (Like: Tenable Nessus, CyberArk, Application Security testing suites, penetration testing tools, Security Information and Event Management (preferably Splunk), one or more Configuration Management Database (e.g. BMC and/or ServiceNow), API automation, and Identity Management systems USCA23F1020 - Page 21 of 32 (e.g., TACACS, AD, Tivoli, OAuth))
• 3 years of experience with cloud security, including active directory federation services
• 3 years of experience with the CSAM (Cyber Security Assessment and Management) software tool (i.e., specifically the software from the DOJ)
• Bachelor's Degree preferred but not required.

• Master's degree in computer science or a related field
• CISSP, CISM, or equivalent certification
• Risk Assessment Methods (RAMs), Risk Management Processes (RMPs), Cybersecurity Compliance Certifications (CCCs), Scorecards, and related documents with ISOs and other applicable stakeholders.

Benefits:
Retirement / Pension Plans

About the Company:
NTT DATA

NTT DATA means Business

NTT DATA is your Innovation Partner anywhere around the world. With business operations in more than 50 countries, we put emphasis on long-term commitment and combine global reach and local intimacy to provide premier professional services from consulting, system development, business process and IT outsourcing, to cloud-based solutions.

NTT DATA Americas' Strategic Staffing group provides our clients with top notch technical talent to augment their core IT staff. Our approach is customer centric, partnering to assist you in achieving your strategic goals and IT initiatives. We get to know your company’s culture and the type of technical staff that thrive within your organization. We understand your specific technical and business requirements, timing, and budget.

• NTT DATA is part of the NTT Group – a Fortune 31 Global IT & Telecom services company.
• NTT Group one of the largest Telecommunications Companies in the world.
• NTT DATA is ranked in the top 10 largest global IT services provider in the world.

Company Size:
10,000 employees or more

Industry:
Management Consulting Services

Founded:
1967

Website:
http://americas.nttdata.com/Careers/Careers.aspx