Information Systems Security Officer (Isso) Gs-2210-14 Fpl Gs-14 (Dh)

Department of Education Headquarters • San Francisco, CA

1d

About The Position

This position is in the U.S. Department of Education (ED), Federal Student Aid (FSA), Chief Technology Division, Security Services Division. The Information Systems Security Officer oversees IT security controls and authorization documentation to ensure systems comply with mandated security policies and requirements. The role provides technical recommendations and security analysis, supports compliance monitoring and risk assessments, and helps ensure identified vulnerabilities are addressed and systems remain protected. The position is classified as GS-2210-14, with a full performance level of GS-14.

Requirements

• Must be a U.S. citizen.
• Males age 18 and over must be registered with the Selective Service.
• Must complete a background investigation and fingerprint check.
• Must be determined suitable for federal employment.
• Must meet applicable time-in-grade and time-after-competitive-appointment requirements if a current federal employee.
• At least one year of specialized experience equivalent to GS-13, performing at least two of the following: supporting risk assessments during Security Assessment and Authorization processes leading to successful ATOs; managing vulnerabilities and timely POA&M development and remediation plans; or supporting effective implementation of security requirements and IT policies and procedures for authorized systems.
• IT-related experience, paid or unpaid, and/or appropriate intensive training demonstrating proficiency in the nine listed competencies: attention to detail, customer service, decision making, information management, interpersonal skills, oral communication, problem solving, teamwork, and technical competence.
• Knowledge of risk management processes, including methods for assessing and mitigating risks.
• Knowledge of cybersecurity and privacy principles, cyberthreats and vulnerabilities, impacts of cybersecurity lapses, encryption algorithms, and customer organizations’ business processes and operations.
• Knowledge of vulnerability information dissemination sources, incident response and handling methodologies, and industry-standard and organizationally accepted analysis principles and methods.
• Ability to integrate information security requirements into acquisition processes, apply baseline security controls, ensure robust software quality control, and establish multiple sources or delivery routes for critical system elements.
• Skill in researching, selecting, interpreting, modifying, and applying guidelines to specific problems or issues.
• Education cannot substitute for experience for this position and grade level.
• If relying on foreign education to meet qualification requirements, provide evidence of U.S. equivalency and a Certificate of Foreign Equivalency with transcripts.
• May be required to serve a probationary or trial period.

Responsibilities

• Oversee implementation of IT security controls and security authorization documents, ensuring systems comply with mandated security policies and requirements.
• Provide technical recommendations and security analysis for systems to ensure appropriate security measures are in place and enforced.
• Develop plans of action and milestones (POA&Ms) for vulnerabilities identified through risk assessments, audits, and inspections, and manage POA&Ms through closure.
• Recognize possible security violations and take appropriate action to report incidents.
• Support compliance activities, including ensuring system security configuration guidelines are followed and compliance monitoring occurs.
• Continuously validate organizational compliance with policies, guidelines, procedures, regulations, and laws, and define or implement policies and procedures when needed to protect systems.
• Support risk assessment efforts during Security Assessment and Authorization processes that result in systems successfully attaining an Authority to Operate (ATO).
• Support implementation and functionality of security requirements and IT policies and procedures consistent with organizational mission and goals for authorized systems and their continued authorization.

Benefits

• Federal employee benefits package for employees and eligible family members.
• Excused leave for parent-teacher conferences (3 hours) and annual health screenings (4 hours).
• Matching leave for community volunteer service.
• Alternative work schedules may be available.
• May be eligible for a recruitment incentive, subject to a service agreement.
• May be eligible for a relocation incentive, subject to a service agreement.
• May be eligible for the Student Loan Repayment Program as a recruitment incentive, subject to a service agreement.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed