Compliance Specialist (STL)

General Summary of Position:

The UMass Lowell (UML) Submillimeter Wave Technology Laboratory (STL) is seeking a Compliance Specialist. This position plays a key role in ensuring compliance with cybersecurity standards as well as other DoD State and University compliance requirements. This position also serves as the Information Systems Security Manager (ISSM) for the Submillimeter-Wave Technology Laboratory (STL) a prime contractor in the Defense Industrial Base (DIB).

Essential Job Duties:

documentation and monitoring of an accredited Defense Counterintelligence and Security Agency (DCSA) Information System in accordance with templates from NIST 800-53 and the current DCSA Assessment and Authorization Process Manual (DAAPM). The candidate will ensure the DoD Enterprise Mission Assurance Support Service (eMASS) is updated as needed to ensure thateMASSdocumentation reflects the current state of a single Multi-User Stand Alone (MUSA) system as quarterly updates to DoDsecurity guidancemandates. The candidate will be the designated Information Systems Security Manager (ISSM)of-recordand will prep and oversee the annual Information System DCSA onsite inspections.

and CMMC compliance management of an existing 100 node internet-isolated on-premises LAN and data center running hardened Cisco and Windows architectures. Inventory management and oversite of several onsite National Security Agency (NSA) Cryptographic Communications Security (COMSEC) cryptographic assets. The candidate will act as the primary of two COMSEC Administrators of-record with the NSA COMSEC Central Office of Record.

and documentation of STLs university and government owned equipment as required per FAR 52-245. This requires interfacing with DoD contacts STLs DoD sponsor and university contacts to ensure compliance and timely completion of annual asset audits and associated reports.

position works to manage maintain document and constantly improve STLs perimeter security posture and related documentation in close collaboration with STLs Facility Security Officer (FSO) and STLs Director.

Compliance Specialist also maintains manages and documents STLs swipe-card system that allows access to STL as well as STLs alarm and any other facility access-monitoring systems. The Compliance Specialist provides biweekly reporting of denied access swipes to STLs Compliance Specialist also investigates weekly university network security reports and provides a monthly network summary report to STLs Facility Security Officer (FSO). Assist STLs FSO with visit requests and reporting requirements on government websites (NBIS & DISS).

Promote the Universitys commitment to customer service by:

Build effective partnerships with co-workers throughout the University by freely sharing appropriate information and providing assistance when needed.

Ensuring optimum service to all internal and external partners in response to all requests for service and information.

Maintaining an environment that is welcoming topersonsof all backgrounds nationalities and roles.

Other Job Duties:

STLs Chemical Hygiene Officer (CHO) STLs Director and University Environmental Health and Safety (EHS) team contacts in maintaining compliance with university safety and safety-specific training requirements.

with UML EHS contacts during and following safety inspections.

above duties are related to STLs anticipated order tomeet specific sponsor requests other compliance related activities may be assigned by STLs Director.

program requires strict adherence to STLs Security Policies Safety Procedures Technology Control Plan and other security/safety relatedpoliciesestablished by STLs FSO COR and Director.

Working Conditions:

Occasional travel (approximately2weeksper year)may be be comfortablewithuse of hand toolsworkingon laddersunder desks relatedinstallations and troubleshooting.

Minimum Qualifications (Required):

Education and Experience:

• Bachelors Degree in Information Technology (IT Computer Science Information Technology Cybersecurity Information Assurance or a related field with 3 years of experience managing cybersecurity in a regulated environment with at least 1 year supporting DoD-related projects or classified research; OR HS diploma/GED equivalent with 5 years of experience managing cybersecurity in a regulated environment with at least 2 years supporting DoD-related projects or classified research.
• Security certification such as CISSP CISM CISA or Security.
• Experience with project management or audit management in a cybersecurity context. Previous experience working within a DoD cleared facility is desired.
• Proven ability to document policies procedures and control narratives for cybersecurity compliance goals.
• Exceptional organizational skills and attention to detail with compliance documentation and deadlines.
• The candidate must be able to obtain a Department of Defense security clearance within 6 months from the date of hire and maintain the clearance while employed at STL.

Preferred Skills:

• NSA COMSEC administration experience. Previous ISSO ISSM or FSO experience. Familiarity with the NIST SP 800 series of security guidance publications. Experience with common hardware and software used for IT security and compliance.
• There will be a strong emphasis on standard and enhanced DoD cybersecurity compliance practices and implementation. Basic experience with common Linux distributions and dedicated hardware firewall technologies is desirable.

Given the nature and responsibilities of the position only current U.S. Citizens will be considered for this position.

Special Instructions to Applicants:

Only current UML Employees within the Grants & Contracts (MTA/GRACE) bargaining unit will be considered during the first 10 business days of the posting. All other candidates will be considered after that period.

This position is contingent upon funding. This is aGrants & Contracts (MTA/GRACE) bargaining unit position Grade P18.Salary anticipated within P18 range of minimum: $^th quartile of $82093 and midpoint of $92017

Review of applications will begin immediately and continue until the position is filled; however the posting may close when an adequate number of qualified applications is received.

Please include a resume cover letter and writing sample to includecompliance documentation/reports with your application. Names and contact information of three references will be required during the application process.