**This opportunity is contingent upon award**

Company Summary

Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future.

Position Overview

Arlo is in search of a Computer and Information Systems Manager to support the IRS Office of Safeguards in conducting computer security reviews.

Work Location

Washington, DC 20224

Job Responsibilities and/or Success Factors

• Use the Safeguards Computer Security Evaluation Matrices (SCSEMs) checklist as a guide to perform Computer Security Reviews on local, state or federal agencies, and their authorized contractors, that receive FTI under IRC Section 6103.
• Work with agency stakeholders to execute system configuration checks, interview system users, and to examine system artifacts against management, operational and technical requirements, CIS Benchmarks, NIST requirements and current IRS standards (IRS Publication 1075, IRC 6103).
• Query the Safeguards case management system and conduct an analysis of the following documents for each agency: most current Safeguard Security Report (SSR), Safeguard Review Report (SRR) from the last on-site review, Correction Action Plan (CAP), After Action Report (AAR), any agency submitted data incidents, Technical Inquiries (Tis) and Notifications. Provide a summary of this analysis to Safeguards.
• Upload the agency-completed PSE Document to Safeguards case management system.
• Schedule pre-review conference call with each agency to validate agency reported information in the PSE Template which guides FTI scope for the on-site review.
• Schedule call(s) with agency to review IT Review Schedule and walkthrough Nessus package and settings adjustments.
• Document results of system configuration checks, system user interviews, and examination of system artifacts against management, operational and technical requirements, CIS Benchmarks, NIST requirements and current IRS standards (IRS Publication 1075, IRC 6103). The method of execution includes automated compliance scans and manual testing. Conclusive test results for each in-scope platform and technology are documented within SCSEMs and uploaded to the IRS case management system.
• Document all computer security findings identified during the On-Site Assessment

Education and Minimum Qualifications

• Must be a US Citizen
• High School Diploma or higher
• A minimum of 5 years of relevant experience with federal government cybersecurity audits and assessments including implementing security controls, configuration changes, software/hardware updates, and vulnerability management.
• Experience in IT/cybersecurity project and personnel management.
• Working knowledge of the IRS organizations, including their infrastructure, responsibilities, programs, and initiatives is preferred.
• A minimum of one of the following certifications:
  • CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP, CISM, GSLC, CCISO, HCISPP, CEH, CySA+/CSA+, GSNA, CFR, PenTest+. In lieu of a certification, graduation from minimum of a 2-year IT/Cybersecurity program at an accredited college or university may be substituted.

AAP Statement

We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.