Information Systems Security Manager (ISSM)

U.S. Secret Service•Washington, DC

17h•$143,913

About The Position

The Information Systems Security Manager (ISSM) serves in the U.S. Secret Service Office of the Chief Information Officer, Chief Information Security Office. The role supports the maintenance and modernization of the agency’s IT and communications infrastructure and helps enhance interoperability, information sharing, and collaboration capabilities. The ISSM advises senior leadership and the Authorizing Official about changes affecting the organization’s cybersecurity posture; ensures security requirements and IT policies and procedures are implemented and functioning in support of the organization’s mission and goals; contributes security risks, mitigations, and other technical risk input to the Risk Governance process; advises senior management on risk levels and security posture; and manages protective or corrective measures when cybersecurity incidents or vulnerabilities are identified. This position requires U.S. citizenship and the ability to obtain and maintain a Top Secret Tier 5 clearance. The selectee must complete pre-appointment drug testing and a counterintelligence polygraph examination, and may be subject to random drug testing and a post-conditional-offer credit check. The position may include a one-year probationary period or a two-year trial period. Applicants must meet the stated IT competency and specialized experience requirements; education cannot substitute for experience.

Requirements

U.S. citizenship.
Obtain and maintain a Top Secret Tier 5 clearance.
Submit to a drug test before appointment and random drug testing while in the position.
Submit to a counterintelligence polygraph examination before appointment.
Submit to a credit check after accepting a conditional offer of employment.
Demonstrate IT-related experience in attention to detail, including ensuring IT programs comply with cybersecurity policies and/or standards.
Demonstrate IT-related experience in customer service, including interpreting IT security guidelines or policies to meet customer needs.
Demonstrate IT-related experience in oral communication, including communicating organizational security policies and procedures to stakeholders.
Demonstrate IT-related experience in problem solving, including providing solutions to cybersecurity issues to meet short- and long-term goals.
For GS-14, have one year of specialized experience equivalent to GS-13, including managing organizational or program information security; handling IT acquisitions; supporting IT-related acquisitions, including National Security Systems; and assessing systems and networks for compliance.
Meet applicable time-in-grade requirements if currently or recently employed in a General Schedule position under a qualifying appointment.
Meet qualification requirements by the announcement closing date; education may not be substituted for the required experience.
Males born after December 31, 1959, must be registered for Selective Service.
Current or former political appointees within the specified categories and period must disclose that information to the Human Resources Office.

Responsibilities

Advise senior leadership or the Authorizing Official of changes affecting the organization’s cybersecurity posture.
Ensure successful implementation and functionality of security requirements and IT policies and procedures consistent with organizational mission and goals.
Participate in the Risk Governance process by providing security risks, mitigations, and input on other technical risks.
Advise senior management, such as the CIO, on risk levels and security posture.
Manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered.
Manage information security through strategic planning, policy enforcement, oversight of personnel and infrastructure, emergency planning, security awareness, and resource allocation.
Perform duties related to hardware, software, and information system acquisitions while ensuring compliance with program management policies.
Provide direct support for IT-related acquisitions, including National Security Systems, applying relevant laws, policies, and guidance throughout the acquisition life cycle.
Assess systems and networks to identify and address deviations from standards and ensure compliance with policies and procedures.