IT SPECIALIST (INFOSEC)

GENERAL EXPERIENCE: Experience, education or training that has provided a basic knowledge of data processing functions and general management principles that enabled the applicant to understand the stages required to automate a work process. Experience may have been gained in work such as computer operator or assistant, computer sales representative, program analyst, or other positions that required the use or adaptation of computer programs and systems.

SPECIALIZED EXPERIENCE: Must have at least 36 months experience, education, or training that approaches techniques and requirements appropriate to an assigned computer applications area or computer specialty area in an organization. Experience planning the sequence of actions necessary to accomplish the assignment where this entailed coordination with others outside the organizational unit and development of project controls.

Experience that required adaptations of guidelines or precedents to meet the needs of the assignment. Experience preparing documentation on cost/benefit studies where is involved summarizing the material and organizing it in a logical fashion.

Manages the COMSEC account for the Wing/Base and subordinate units. Ensures that the COMSEC Responsible Officer's (CRO's), Secure Telephone Unit (STUIII) Voice Responsible Officer's(SRO's) (SVRO's), and FORTEZZA Responsible Officers (FRO's), comply with Air Force, National Guard, state, Federal laws and applicable regulations. Act as the sole point of contact to the wing commander concerning the Wing COMSEC posture. Provide guidance to unit commanders, CRO's, SRO's SVRO's, FRO's, and COMSEC users.

Establish training programs for CRO's, SRO's, and SVRO's, FRO's and alternates. Report deviations from established COMSEC and Security guidelines to higher headquarters. Assure semi-annual functional reviews of all COMSEC users' accounts are performed. Manages the AFEKMS program for the Wing/Base. Initializes the system, performs system backups, determines operator access and control functions (privilege management), reloads and configures the operating system's parameters.

Installs hardware and software and trains alternate(s) in the AFEKMS operations. Provides Data Transfer Device (DTD) Modern Key transfer device training to assigned CROs. Prepares Emergency Action Plans (EAP's) Operating instruction to ensure that the EAPs can be implemented immediately. Itemizes procedures on task cards that are necessary while simultaneously preventing compromise of COMSEC material. Conducts and documents semi-annual dry runs involving all personnel associated with the COMSEC account.2.

Serves as the Base Computer Security (COMPUSEC) Manager. Establishes and publishes base-wide policy, as required, to effectively manage the Wing/Base COMPUSEC programs. Serves as Wing/Base Information Systems Security Manager (ISSM). Assists all Wing/Base organizations in the development of their individual COMPUSEC program. Manages, provides guidance and assists in the preparations of all certification and accreditation packages in accordance with prescribing directives.

Makes recommendations to the Designated Approval Authority (DAA). Uses state of the art information security software and hardware tools to gather information and manage security on assigned telecommunication networks and in the Wing/Base "firewall" or "Barrier Reef" software and hardware. Analyzes the information gathered to determine vulnerabilities, threats, and detect any compromises. Utilizes approved software to ensure Ensures user password configuration and use meets current standards.

May be required to assist investigating agency on cases of sensitive matters. Manage the Information Protection Assurance Assessment & Assistance Program (IPAAP)(IAAP) for the wing, tenants, and GSUs. Work with the Network Control Center (NCC), and the Regional Operations Security Control center (ROSC), to implement procedures to protect information on all networks managed by the NCC. Performs IPAAP IAAP assessments, per prescribing directives, of all wing units and assigned GSUs.3.

Manages, develops, and conducts the base computer Security Awareness Training and Education Information Assurance Awareness Program. Maintain master records of SATE Information Assurance Awareness training for the Wing and supported GSU's, providing statistical data to command authorities as required. Serves as the Telecommunications Monitoring and Assessment Program(TMAP) Manager. Evaluates, advises, and trains agencies organizations and users throughout the entire Wing on TMAP requirements.

Manages the Base Emissions Security (EMSEC) program. Assists computer systems users on all matters concerning Emissions Security. Performs EMSEC inspections and certifies areas/systems as appropriate. Complies with EMSEC directives and submits reports to appropriate MAJCOM. Conducts EMSEC customer education. Establishes, maintains, and exercises Information Condition (INFOCON) adjustment plans and procedures, to ensure mission critical systems capabilities are maintained, and sustained.

Responds to downward directed and local INFOCON change requirements. Advises local Command authorities of the necessities for local INFOCON changes, based on situation. Serves as the central focal point for all Time Compliance Network Orders (TCNO) system vulnerability alerts. Ensures Network Control Center, local functional system administrators (FSA's), Client Support Administrators (CSA's) and users, install all security patches comply with security procedures, and identified vulnerabilities are corrected.

Reports compliance status to higher headquarters within mandated time frames. Assists users in determining equipment requirements to prescreen and determine if proposed system meets current COMPUSEC needs of the user requirements, to include future expansion, and comply with the AF computer security standards. Performs other duties as assigned.