Executive Director, Chief Information Security Officer (XD, CISO)

DHS Headquarters•Springfield, VA

About The Position

This position is located in the Department of Homeland Security (DHS), Management Directorate, Office of the Chief Information Office (OCIO). The OCIO is responsible for matters related to DHS information and its information environment, including customer experience, network operations, information systems, information assurance, defensive cybersecurity, and communications. The Executive Director, Chief Information Security Officer (XD, CISO) serves as the principal advisor to the Chief Information Officer (CIO) for the DHS enterprise information security program. The role leads and oversees risk management, policy, compliance, and oversight in alignment with DHS strategic direction. Through planning, analysis, development, implementation, maintenance, and enhancement of information security programs, policies, procedures, and tools, the XD, CISO provides cybersecurity oversight for enterprise IT services across DHS. The position leads the statutory Information Security Program under the Federal Information Security Modernization Act of 2014, and oversees DHS implementation of applicable laws and regulatory requirements. It provides executive direction for department-wide security initiatives and long-range IT activities, coordinates information security organizations across DHS components, and aligns resources to support the Department's mission. The CISO also monitors technological and organizational developments, communicates emerging technology risks and impacts, promotes compliance, and helps ensure the confidentiality, integrity, and availability of sensitive information on operational IT systems.

Requirements

IT-related experience demonstrating attention to detail, customer service, oral communication, and problem solving.
Demonstrated expertise in IT security planning and in developing and managing enterprise application delivery and IT services, including end-to-end security requirements management for enterprise IT services.
Expert-level knowledge of applicable directives, security policies, procedures, and standards to align application delivery and quality assurance programs with agency mission requirements across multiple departments.
Comprehensive understanding of IT security concepts, theories, practices, and standards, with ability to serve as an authority in security architectural planning and provide senior-level guidance to agency leadership.
Expertise in security architectural planning and ability to advise peers at headquarters and subordinate agencies on applying or adapting theories, concepts, principles, standards, methods, and practices.
Demonstrated evidence of the five Executive Core Qualifications for applicable career SES appointments: commitment to the rule of law and principles of the American founding; driving efficiency; merit and competence; leading people; and achieving results.
U.S. citizenship.
If a male applicant born after December 31, 1959, registration with the Selective Service System or exemption from registration.
Ability to obtain and maintain an interim and/or final security clearance before entering on duty; selected applicants must successfully complete a background investigation for Top Secret/Sensitive Compartmented Information clearance.
File an OGE-278e Confidential Financial Disclosure Report within 30 days of appointment and annually thereafter.
Complete a one-year supervisory probationary period unless already completed.
Complete a Declaration for Federal Employment when requested.

Responsibilities

Advise the CIO on developing, publishing, and implementing departmental information security policies, standards, and guidance, and coordinate, integrate, train, and enforce the Department's information security program.
Lead the statutory-mandated Information Security Program under the Federal Information Security Modernization Act of 2014.
Oversee DHS implementation of applicable regulatory requirements, including the Computer Security Act, FISMA, the Clinger-Cohen Act, OMB circulars, Executive Orders, Homeland Security Presidential Directives, and Congressional inquiries.
Plan and implement department-wide security enhancement initiatives; follow applicable laws, directives, policies, and directed actions; and provide methodologies, tools, guidance, and subject matter expertise to support components' federal compliance and reporting requirements.
Communicate the information security strategic plan to every component and drive implementation of the Department's strategic information security management plan, coordinating information security organizations across DHS.
Assess the potential organizational and individual impacts of emerging security technologies and analyze risks associated with using or not using them.
Assess the impact of legislation and promote compliance.
Keep personal and subordinate skills current and maintain awareness of IT developments.
Ensure the confidentiality, integrity, and availability of sensitive information stored on and processed by operational IT systems supporting DHS mission elements.
Provide executive direction in planning, implementing, and evaluating long-range IT activities supporting DHS strategic business plans and cross-functional business solutions.
Align money, people, time, and technology resources appropriately to support IT and achieve the DHS mission and tasks.
Follow government and industry organizational innovations, including process redesign and reengineering methods, and reassess operations against best practices.