IT Spec (INFOSEC) 'Information System Security Officer (ISSO)', GS-2210-13 FPL GS-13 (DH)

Department of Education Headquarters • San Francisco, CA

1d

About The Position

The Information System Security Officer (ISSO) is in the U.S. Department of Education (ED), Federal Student Aid (FSA), Chief Technology Division, Security Services Division. FSA manages administrative and oversight functions supporting programs authorized under Title I and Title IV of the Higher Education Act of 1965.

The ISSO oversees implementation of information technology security controls and security authorization documents to ensure systems comply with mandated security policies and requirements. The role analyzes IT activities to confirm that appropriate security measures are in place, enforced, and remediated as needed; identifies and reports possible security violations; and takes corrective action to address cybersecurity incidents. The ISSO also ensures that system modifications, acquisitions, and outsourcing efforts address information security requirements consistent with organizational goals, and continuously validates systems against applicable policies, guidelines, procedures, regulations, and laws.

This is a GS-2210-13 position. Education cannot be substituted for experience at this grade level. The position requires successful completion of suitability and background-investigation processes and may include a probationary or trial period. Relocation expenses will not be paid. The position is designated non-essential during federal government closures and does not require financial disclosure.

Requirements

• Must be a U.S. citizen.
• Males age 18 and over must be registered with the Selective Service.
• Must complete a background investigation and fingerprint check and be determined suitable for federal employment.
• Must meet qualification requirements within 30 days of the vacancy announcement closing date; current federal employees must also meet applicable time-in-grade and time-after-competitive-appointment requirements within that period.
• One year of specialized experience equivalent to at least GS-12, including experience performing at least two of the following: conducting cybersecurity risk assessments and supporting Security Assessment and Authorization efforts; ensuring vulnerabilities and Plans of Actions and Milestones are processed promptly and remediation plans are in place; or supporting implementation and functionality of security requirements and IT policies and procedures consistent with an organization's mission and goals.
• Must demonstrate IT-related experience, paid or unpaid experience, and/or appropriate intensive training sufficient to meet the required proficiency level in the nine competencies: attention to detail, customer service, decision making, information management, interpersonal skills, oral communication, problem solving, teamwork, and technical competence.
• Knowledge of cybersecurity risk-management processes, including methods for assessing and mitigating cybersecurity risks.
• Knowledge of cybersecurity and privacy principles, vulnerabilities, impacts of cybersecurity lapses, and the customer organization's applicable business processes and operations.
• Knowledge of vulnerability-information dissemination sources, such as alerts, advisories, errata, and bulletins, and of incident-response and handling methodologies.
• Ability to integrate cybersecurity requirements into system modifications using applicable baseline security controls and to ensure a robust software quality-control process.
• Skill in researching, selecting, interpreting, modifying, and applying guidelines to specific cybersecurity problems or issues.
• Education cannot substitute for experience for this position and grade level.
• If relying on foreign education to meet qualification requirements, must provide a Certificate of Foreign Equivalency with the transcript.

Responsibilities

• Oversee implementation of IT security controls and security authorization documents to ensure systems comply with mandated security policies and requirements.
• Analyze IT activities to ensure appropriate security measures are in place, enforced, and remediated as needed.
• Recognize possible security violations, report incidents as required, and take corrective measures to address cybersecurity incidents.
• Ensure system modifications, acquisitions, and outsourcing efforts address information security requirements consistent with organizational goals.
• Continuously validate systems against policies, guidelines, procedures, regulations, and laws to ensure compliance.

Benefits

• Comprehensive federal employee benefits package for employees and their families.
• Family-friendly work environment and work-life-balance support.
• Excused leave for parent/teacher conferences (3 hours).
• Excused leave for annual health screenings (4 hours).
• Matching leave for community volunteer service.
• Alternative work schedules may be available.
• May be eligible for a recruitment incentive, subject to a service agreement.
• May be eligible for a relocation incentive, subject to a service agreement.
• May be eligible for the Student Loan Repayment Program as a recruitment incentive, subject to a service agreement.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed