Supervisory IT Cybersecurity Specialist (Direct Hire)
About The Position
This position is in the Division of Administration (DA), Information Technology (IT) Branch, Cybersecurity Section. The incumbent serves as the Commission’s Chief Information Security Officer (CISO) and reports to the Chief Information Officer (CIO). The CISO manages and oversees the Commission’s cybersecurity compliance and operations units, ensuring adherence to best practices and response to emerging cybersecurity threats. The position leads strategic planning and roadmap development for the cybersecurity program, including contingency plans for cybersecurity incidents. It oversees formal information-system assessments, the Assessment and Authorization (A&A) process, and preparation of Authority to Operate (ATO) packages. The CISO evaluates the adequacy of the Commission’s security controls and systems, conducts and supports security assessments and exercises, and prepares the annual cybersecurity program budget report to Congress. The incumbent establishes and manages an IT Cybersecurity Program compliant with federal laws and regulations; assesses management, operational, and technical security controls; and leads incident response and crisis-management exercises. The role also engages with external organizations to share best practices, strategies, resources, and capabilities relevant to an effective cybersecurity program for a federal financial regulatory agency.
Requirements
- At least one year of specialized experience equivalent to the next lower GS/CT-14 level.
- Experience managing agency policy and implementation to ensure plans and procedures support recovery and continued operations of information systems during disruptions.
- Experience conducting and supporting routine internal and external security assessments to evaluate the strength and effectiveness of an agency cybersecurity program.
- Experience communicating effectively and resolving crises or urgent matters within the relevant domain to mitigate immediate and potential threats through preparedness, investigation, response, and recovery.
- Information technology-related experience demonstrating the required competencies: Leadership, Developing Others, Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Reasoning, Teamwork, and Technical Competence.
- U.S. citizenship.
- Males born after December 31, 1959, must be registered for Selective Service.
- Ability to undergo a background/security investigation.
- Education is not required and may not be substituted for specialized experience.
Responsibilities
- Manage strategic planning and the roadmap for the cybersecurity program, including strategic and contingency plans for cybersecurity incidents; review and test updates as directed by the CIO.
- Plan and oversee formal assessments of information systems and manage the Assessment and Authorization (A&A) process to ensure systems meet cybersecurity and risk requirements.
- Oversee preparation of Authority to Operate (ATO) packages for the Authorizing Official’s signature.
- Ensure CISO programs and initiatives are strategically aligned and communicated throughout the Commission.
- Evaluate the adequacy of the Commission’s IT security controls and systems.
- Conduct and support routine internal and external security assessments, tabletop exercises, penetration tests, and playbook development.
- Prepare the Commission’s annual cybersecurity program budget report to Congress.
- Establish and manage an IT Cybersecurity Program compliant with federal laws and regulations, including implementing and managing policies, guidelines, standards, processes, and management controls.
- Conduct independent assessments of management, operational, and technical security controls and enhancements to determine their overall effectiveness.
- Lead cybersecurity incident response according to established crisis-management plans and communicate as required.
- Use mitigation, preparedness, response, and recovery approaches to optimize the Commission’s information security posture.
- Conduct regular crisis-management exercises to validate agency response plans.
- Engage with external organizations to identify opportunities to share best practices, strategies, resources, and capabilities.
Benefits
- Federal employees and their families have access to a comprehensive benefits package; specific benefits depend on the position and should be confirmed with the hiring agency.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
