This position provides Information Assurance support to the Air Force Medical Omnibus Web Applications (AFMOWAP) program office, which is within the Business Enterprise Systems Directorate (AFLCMC/HI) at Maxwell-Gunter AFB, AL.
AFMOWAP is a family of 11 applications in sustainment that are used by the AF Medical community to manage information in direct support of active AF, ANG, and AFR units
Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations.
Develop network environment/system security requirements specific to an IT acquisition for inclusion in procurement documents.
Recommend resource allocations required to securely operate and maintain an organization’s network environment/system IA requirements.
Participate in an Information System risk assessment during the C&A process.
Develop security requirements for hardware, software, and services acquisitions specific to network environment/system IA security programs.
Ensure that IA and IA enabled software, hardware, and firmware comply with appropriate network environment/system security configuration guidelines, policies, and procedures.
Assist in the gathering and preservation of evidence used in the prosecution of computer crimes.
Ensure that network environment/system Information System recovery processes are monitored and that IA features and procedures are properly restored.
Review IA security plans for the network environment/system.
Ensure that all IAM review items are tracked and reported.
Identify alternative functional IA security strategies to address organizational network environment/system security concerns.
Ensure that IA inspections, tests, and reviews are coordinated for the network environment/system.
Review the selected security safeguards to determine that security concerns identified in the approved plan have been fully addressed.
Evaluate the presence and adequacy of security measures proposed or provided in response to requirements contained in acquisition documents.
Monitor contract performance and periodically review deliverables for conformance with contract requirements related to network environment/system IA, security, and privacy.
Provide leadership and direction to network environment/system personnel by ensuring that IA security awareness, basics, literacy, and training are provided to operations personnel commensurate with their responsibilities.
Develop and implement programs to ensure that systems, network, and data users are aware of, understand, and follow network environment/system and IA policies and procedures.