- Support the confidentiality, integrity, and availability of information systems, networks, and data.
- Administer cybersecurity programs, policies, procedures, and security controls.
- Conduct risk assessments and identify vulnerabilities, security gaps, and mitigation strategies.
- Promote cybersecurity awareness and ensure compliance with security regulations, policies, and best practices.
- Support the Information System Security Manager (ISSM) with Risk Management Framework (RMF) activities, security documentation, control validation, and accreditation requirements.
- Develop and maintain RMF accreditation packages and Authorizations to Operate (ATOs).
- Create, manage, and validate cybersecurity documentation, including SSPs, TSPs, POA&Ms, and eMASS records.
- Conduct security assessments, audits, inspections, and architecture reviews.
- Collaborate with technical and program teams to integrate security requirements into system designs and ensure regulatory compliance.
- Assess security controls, identify risks, and implement corrective actions to strengthen security posture.
- Develop cybersecurity and privacy policies, procedures, and implementation guidance.
- Ensure compliance with DoD requirements and DISA Security Technical Implementation Guides (STIGs).
- Develop and deliver security awareness training programs.
- Support cybersecurity incident response, reporting, investigation, and remediation efforts.
- Build and maintain effective relationships with stakeholders, customers, regulators, and partner organizations.
- Coordinate CCB meetings, agendas, and communications.
- Maintain configuration management processes, databases, and change request tracking systems.
- Prepare and distribute change requests, meeting materials, minutes, and change directives.
- Review change requests for completeness and compliance.
- Track change requests and action items through closure.
- Communicate change decisions to stakeholders and generate change management reports.
- Perform other official duties as required.
Join the HJF Team!
HJF is seeking an IT Specialist (Cyber Security) supports the Information System Security Manager (ISSM) in ensuring system security, managing ATO packages, uploading eMASS documentation, and serving as the Change Control Board (CCB) Administrator. Additional responsibilities include leading security awareness training, assisting with incident handling, and evaluating security gaps to mitigate organizational risk.
This position will be in support of OCIO ( Office of the Chief Information Officer) /NOC (Network Operation Center) at USUHS in Bethesda, MD.
The Henry M. Jackson Foundation for the Advancement of Military Medicine (HJF) is a nonprofit organization dedicated to advancing military medicine. We serve military, medical, academic and government clients by administering, managing, and supporting preeminent scientific programs that benefit members of the armed forces and civilians alike. Since its founding in 1983, HJF has served as a vital link between the military medical community and its federal and private partners. HJF's support and administrative capabilities allow military medical researchers and clinicians to maintain their scientific focus and accomplish their research goals.
The Henry M. Jackson Foundation for the Advancement of Military Medicine (HJF) is a nonprofit organization dedicated to advancing military medicine. We serve military, medical, academic and government clients by administering, managing and supporting preeminent scientific programs that benefit members of the armed forces and civilians alike. Since its founding in 1983, HJF has served as a vital link between the military medical community and its federal and private partners. HJF's support and administrative capabilities allow military medical researchers and clinicians to maintain their scientific focus and accomplish their research goals.