IT Specialist (Data Protection)

Office of Administration•Washington, DC

About The Position

This position is in the Executive Office of the President (EOP), Office of Administration (OA), Office of the Chief of Information Technology (OAIT), Data Protection Division (DPD). The Data Protection Division provides technology services to the EOP, including helping secure information systems that store or process EOP data and ensuring electronic records are captured, preserved, and transferred to the National Archives and Records Administration (NARA). The IT Specialist (Data Protection), GS-2210-14, develops guidance and recommendations on data protection, data security, and records management; works with stakeholders to identify and categorize data sources and maintain a central repository; and plans and implements cybersecurity initiatives consistent with EOP policies, federal requirements, and industry best practices. The role identifies system security risks and process gaps, directs security assessments, and serves as a primary contact and decision-maker for security and records management matters and work prioritization. It also directs technology system assessments, recommends and implements controls to protect EOP data, supports the system authority to operate process, and conducts continuous monitoring.

Requirements

U.S. citizenship or nationality.
Selective Service registration for males born after December 31, 1959, unless exempt.
Subject to pre-employment and random drug testing; the position is designated for drug testing under the EOP Drug-Free Workplace Program.
Direct deposit is required.
Suitability for federal employment.
May be required to complete a one-year trial or probationary period if one has not already been completed in a competitive or excepted service position.
Status candidates must meet time-in-grade requirements: 52 weeks at the next lower grade level.
Possess, or be able to obtain within six months of employment, a current Certified Information Systems Security Professional (CISSP) certification.
Meet the applicable IT Specialist (2210) basic requirements, including attention to detail, customer service, oral communication, and problem solving.
Have at least one year of specialized experience at a level comparable to the next lower grade or pay band; for GS-14, this is experience equivalent to GS-13.
GS-14 specialized experience must include formulating and delivering comprehensive written reports and oral presentations to executive leadership and external stakeholders evaluating program and mission effectiveness using data visualizations, complex tables, and narrative concepts.
GS-14 specialized experience must include interpreting and applying federal data regulations, policies, and mandates, including the Paperwork Reduction Act and Federal Records Act, and ensuring organizational compliance with them and established data prioritization frameworks.
GS-14 specialized experience must include partnering with senior IT leadership and technical stakeholders to centralize, standardize, and validate organizational information assets to support data integrity, security, and accessibility.
GS-14 specialized experience must include managing and aligning information management systems with agency data priorities through knowledge of data architecture, including defining data formats, managing metadata, and analyzing cross-system relationships.
All qualifications must be met by the announcement closing date.
Only experience and education obtained by the announcement closing date will be considered.

Nice To Haves

CISSP certification is identified as a quality ranking factor.

Responsibilities

Develop and maintain guidance and recommendations for peers, subordinates, and leadership on data protection, data security, and records management.
Collaborate with stakeholders to identify and categorize data sources according to records statutes, hosting environments, data types, and other metadata, and establish and maintain a central repository of those sources.
Plan, implement, and deliver cybersecurity initiatives and ensure EOP information systems comply with EOP policies and standards, federal requirements, and industry best practices.
Collaborate with organizational partners to identify system security risks and technology process gaps, including directing security assessments.
Serve as the primary point of contact and decision-maker for security and records management matters and work prioritization among EOP leadership, contract technology implementation teams, NARA, and other external partners.
Direct technology system assessments to identify data protection risks and recommend and implement controls to protect EOP data, including conducting new system assessments, supporting the system authority to operate process, and performing continuous monitoring.