Associate Chief Information Officer for Security Operations

Treasury, Departmental Offices•Washington, DC

12d

About The Position

This position serves as the Associate Chief Information Officer for Security Operations and reports to the Deputy Administrator for Technology Services Operations. The role leads and manages all functions of the Treasury Security Operations Center (TSOC), which provides threat defense, threat detection, threat intelligence, digital forensics, and incident response for classified and unclassified systems. The incumbent leads cross-functional protective-control efforts, operates technical capabilities that ingest internal sensor signals and external telemetry to identify threats, and oversees activities in the Departmental incident response plan. The role also manages the SOC budget and leads a hybrid staff of federal and contracted practitioners and specialists responsible for protecting the confidentiality, integrity, and availability of Treasury systems. The incumbent communicates active-defense activities to senior Treasury officials and provides authoritative recommendations and solutions concerning federal mandates and legislation, risk management, and operational capability improvement.

Requirements

U.S. citizenship.
Meet the Executive Core Qualifications (ECQs) and Mandatory Technical Qualifications (MTQs) by the announcement closing date.
Demonstrate managerial experience, typically gained at or above the GS-15 level or equivalent, including experience directing an organizational unit, accountability for programs or projects, monitoring and adjusting organizational goals, supervising employees at least 25% of the time, or exercising executive or policy functions.
For an initial career SES appointment, clearly demonstrate the ECQs in a resume of no more than two pages.
Demonstrate experience leading and managing day-to-day Security Operations Center functions, including threat defense, threat detection, threat intelligence, digital forensics, and incident response.
Demonstrate executive knowledge and experience in IT incident response, including leading enterprise incident characterization, severity determination, declaration, containment, eradication, and post-mortem activities.
Demonstrate experience leading cross-functional IT threat-defense efforts to implement protective controls, reduce attack surface and exposure, improve countermeasures, and achieve cost effectiveness.
Complete required personnel security vetting and federal employment suitability processes.
Complete the required SES probationary period if not previously completed.
Use Direct Deposit/Electronic Funds Transfer for salary payment.
Meet applicable Selective Service registration requirements.
Complete the Personal Identity Verification process and provide two forms of identification from Form I-9.
File a Confidential Financial Disclosure Report within 30 days of appointment and annually thereafter.
Disclose current or qualifying former political appointments as required.

Responsibilities

Lead cross-functional Departmental stakeholder efforts to identify and implement protective controls that minimize Treasury’s attack surface, reduce exposure, improve technical countermeasures, and achieve cost efficiencies through economies of scale.
Operate technical capabilities that ingest signals from internal sensors and telemetry from external sources to identify threats.
Oversee Departmental incident response activities, including incident characterization, severity determination, declaration, containment, eradication, and post-mortem analysis and actions; use digital forensics to support these activities.
Oversee and manage the Security Operations Center budget.
Lead a hybrid staff of federal and contracted practitioners and specialists focused on the confidentiality, integrity, and availability of Treasury’s classified and unclassified systems.
Communicate Treasury active-defense activities to the Deputy Administrator, Treasury Chief Information Officer, Treasury Chief Information Security Officer, and other program and policy officials.
Provide authoritative recommendations and solutions concerning federal mandates and legislation, risk management, and operational capability improvements.