IT Specialist (Information Security Officer)

Administrative Office of the U.S. Courts•Washington, DC

About The Position

This position is in the Department of the Chief Information Technology Officer, Product Development Office (PDO), System Readiness Division, Information Assurance Branch. The branch provides quality assurance, information security, and training for Judiciary applications and technologies by testing and validating systems, ensuring security compliance, and training judges, court staff, and Administrative Office employees on safe and reliable technology use. The IT Specialist serves as a cybersecurity analyst supporting the Mission Systems Security team as an Information Security Officer (ISO). The role provides security oversight, compliance, and governance for PDO's mission system application portfolio and for new or modernized systems. The specialist implements the Judiciary Information Security Framework and performs ISO duties and security program risk management throughout the full software development and technology-adoption lifecycle. This includes collaborating with subject matter experts, advising security architects, administering continuous monitoring, and tracking compliance reporting. The incumbent coordinates, plans, builds, and implements security controls and procedures to establish and maintain appropriate security postures across supported programs. The position requires expertise in client and case management systems, such as Management/Electronic Case Filing (CM/ECF) and the Probation and Pretrial Automation Tracking System, as well as cybersecurity and cloud security knowledge. The specialist designs and assesses security controls for public, private, and hybrid cloud environments, maintains security authorization documentation, supports risk management and remediation, coordinates with the enterprise IT security office, and provides government oversight of contractor security processes. The position also requires escalating concerns to the Security Branch Chief and providing regular status updates to stakeholders.

Requirements

At least one full year (52 weeks) of specialized experience in or directly related to the line of work; five years is preferred.
Demonstrated experience developing security documentation.
Demonstrated experience managing risk for small- and large-scale applications.
Knowledge of enterprise security tooling.
Expertise in client and case management systems, such as CM/ECF and the Probation and Pretrial Automation Tracking System.
Knowledge of cybersecurity and cloud security.

Nice To Haves

Five years of specialized experience is preferred.

Responsibilities

Implement the Judiciary Information Security Framework and perform assigned Information Security Officer duties.
Manage security program risks throughout the full lifecycle of software development and technology adoption.
Collaborate with subject matter experts and advise security architects on security matters.
Administer continuous monitoring and track compliance reporting.
Coordinate, plan, build, and implement security controls and procedures to establish and maintain security postures for supported programs.
Design security controls, processes, and procedures for public, private, and hybrid cloud integrations in accordance with Judiciary and federal guidance.
Analyze security requirements for cloud implementation and integration.
Implement technology solutions dedicated to data protection in the cloud.
Work with development teams to ensure software security practices are implemented in applicable environments, including public, private, and hybrid cloud.
Develop systems security documentation and conduct security evaluations, audits, and reviews of cloud environments.
Conduct risk and vulnerability assessments of planned and installed information systems.
Develop and maintain security artifacts for security authorization packages and IT scoreboards for cloud initiatives.
Review security weaknesses and recommend corrective actions or remediation for public, private, hybrid, and cloud environments.
Partner with the enterprise IT security office to address Judiciary security policies and coordinate national program security assessments for cloud initiatives.
Ensure security policies and procedures are appropriately applied to maintain information systems' reliability and accessibility in cloud environments.
Provide government oversight of security processes and procedures conducted by contractor staff.
Escalate issues and concerns to the Security Branch Chief.
Provide regular status updates to stakeholders, including management and customers.