Diego Garcia: Information Assurance Officer (IAO)

Title:

Diego Garcia: Information Assurance Officer (IAO)

Belong, Connect, Grow, with KBR!

Program Summary

KBR provides full-spectrum base operations support to Naval Support Facility Diego Garcia, a remote location in the British Indian Ocean Territory. Our robust supply chain ensures on-time delivery of mission-critical supplies, and our team conducts essential port and airfield operations in this geographically complex environment. The KBR team is over 1,000 people strong, providing not only life support services such as water treatment, electricity, and telecom/antenna maintenance, but also quality of life services like Morale, Welfare, and Recreation (MWR) and an award-winning dining facility.

Job Summary

Assists the ISSMs in meeting their duties and responsibilities; implements and enforces all cybersecurity policies and procedures; ensures that all users have the requisite security clearances and access authorization; initiates protective or corrective measures when a cybersecurity incident or vulnerability is discovered; and ensures that all DoD IS cybersecurity-related documentation is current and accessible to properly authorized individuals. Coordinate with the Command Security Manager to ensure that all users have the requisite security clearances and access authorization and are aware of their cybersecurity responsibilities for DoD IS and PIT systems under their purview before being granted access to those systems.

Roles and Responsibilities

• The ONE-NET Information Assurance Manager (IAM) or NCTSFEDETDG SME will issue an appointment letter designating the individual as the IAO.
• The IAO shall meet the requirements specified for “Operationally Sensitive Positions” in Annex 2.
• Provides IA services on government-approved networks to meet Navy requirements IAW DoD Directive 8500.1, SECNAV M-5239.2, SECNAV Instruction 5239.3 (Series).
• Fulfills both the ISSM and the ISSO roles when circumstances warrant.
• The work of this position includes responsibility for analyzing, managing, or performing work necessary to plan, design, develop, acquire, document, test, implement, integrate, maintain, or modify systems for solving problems or accomplishing work processes by using information technology (IT) systems such as computers, servers, routers, etc.  
• The incumbent is accountable for the effectiveness of all IA functions at the LNSC; ensures that IA processes are incorporated into the day-to-day operation of the LNSC; performs process audits and risk assessments, develops risk assessments, and develops feasible and suitable operational continuity plans for the LNSC; and is accountable for the achievement of prescribed operational metrics.  
• Develops, documents, communicates, and maintains IA processes, procedures, and policies for the organization; coordinates with other functional service owners, IA personnel at customer activities, and/or LNSC leaders, as necessary; escalates issues to appropriate levels of leadership; and articulates policy and procedures to customers and peers. 
• Facilitates the development and move into production of all new functionality associated with the IA tools suite oversees the work of employees and vendors assisting in the IA tools suite and provides IA training to LNSC staff and customer activities.
• Coordinates a variety of complex and unusual security issues with ISD security officers and the TNOSC IA staff for security vulnerability when there is no complete agreement on methods, procedures, or objectives. 
• Develops, implements, and coordinates operations above the region level designed to ensure, protect, and restore IT systems, services, and capabilities.
• Monitors and evaluates ONE NET and legacy network systems' compliance with IT security requirements.
• Advises and guides in implementing IA security policies and procedures in the development and operation of ONE NET and legacy networks.
• Develops and maintains a comprehensive Continuity of Operations (COOP) plan for all ONE NET and legacy equipment in the LNSC for disaster recovery.
• Establishes and maintains a comprehensive IA quality assurance program for diverse platforms that require IA patches, installation of CTOs and IAVAs/IAVBs, cover file back-up and recovery, equipment maintenance, and quality control of system processing and outputs; and directs all INFOCOM efforts for the region.
• Adapts and implements systems diagnostic and maintenance tools to ensure the availability and functionality of systems required to support ONE NET and legacy network LNSC objectives and evaluates and recommends selection of new systems diagnostic tools.  
• Installs and maintains software and hardware, controls current versions and future releases of ONE NET enterprise software, and documents the physical configuration of ONE NET and legacy networks maintained by the LNSC.
• Optimizes the functionality of networks and systems and diagnoses and recovers failed systems.
• Identifies and anticipates exchange and file server performance, availability, capacity, or configuration problems.
• Initiates corrective or preventive actions, such as increasing disk or memory capacity to improve performance.
• Reallocates resources as they become available, optimizes systems performance, and recommends additional components to improve overall systems performance.
• Plans and submits Requests for change for the installation of new products or equipment, e.g., servers; works closely with customs officials to ensure seamless implementation; resolves installation problems; identifies and mitigates security vulnerabilities and risks; and maintains server integrity and availability.
• Develops and presents training on the operation and maintenance of new systems to the IT staff including specialists in a variety of specialty areas.

Basic Qualifications

• Must be a U.S. Citizen.
• Requires a Secret Clearance
• Two years of recent experience in the IT-related field and one year of working experience in Information Security (INFOSEC).
• Be able to perform the tasks required by DoD and Navy Information Assurance and Network security directives.
• Must possess administrative, organizational, and computer skills to include proficiency with Microsoft Office suite including MS Word, PowerPoint, Excel, and Outlook.
• Ability to work quickly and in a potentially high-stress environment.
• Must pass overseas medical screening and be in good health.

JOB SPECIFICATIONS:  SPECIAL CERTIFICATIONS OR TRAINING

• IAT-2: CISSP (or Associate) or CISA or GSE or SCNA.
• Information Systems Security Officer (ISSO) must meet the requirements outlined in the DOD 8570.1M directive matrix IAM-2.

EDUCATION:

• Bachelor's degree from an accredited four-year college or university with a major in computer science/engineering, electrical engineering, computer science, or equivalent combination of experience, education, and training.

In compliance with the U.S. federal government’s vaccine mandate, only candidates who are fully vaccinated for COVID-19 or have a reasonable accommodation or approved medical exception will be considered for this position.

KBR Benefits

KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Inclusion and Diversity at KBR

At KBR, we are passionate about our people, sustainability, and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a more inclusive and diverse company. That commitment is central to our team of team’s philosophy and fosters an environment of real collaboration across cultures and locations. Our individual differences and perspectives bring enhanced value to our teams and help us develop solutions for the most challenging problems. We understand that by embracing those differences and working together, we are more innovative, more resilient.