Associate Chief Information Officer for Security Operations

Summary

This position serves as the Associate Chief Information Officer for Security Operations and reports to the Deputy Administrator for Technology Services Operations, and is responsible for leading and managing all functions of the Treasury Security Operation Center (TSOC). The TSOC provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions for both unclassified and classified systems.

Duties

Help

As Associate Chief Information Officer for Security Operations, you will:

• Lead a cross-functional team of Departmental stakeholders to identify and implement protective controls that minimize Treasury's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale.
• Operate a set of technical capabilities that ingest signal from internal sensors (e.g., endpoint agents, proxies, firewalls, packet capture, netflow) and capture telemetry from external sources (e.g., vulnerability scans, vulnerability disclosures, third parties). to identify threats.
• Oversee all activities as captured in the Departmental incident response plan, including but not limited to incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions. The incumbent shall use digital forensics to support these activities.
• Oversee and manage the Security Operations Center budget. Lead the work of a subordinate a hybrid staff of federal/contracted practitioners and specialists that are focused on ensuring the confidentiality, integrity, and availability of all Treasury's classified and unclassified systems.
• Communicate to the Deputy Administrator, Treasury Chief Information Officer and Treasury Chief Information Security Officer, and other program and policy officials regarding Treasury's active defense activities. Provides authoritative recommendations and solutions to problems and challenges with respect to federal mandates/legislation, risk management, and improvement of operational capabilities.

Requirements

Help

Conditions of employment

• U.S. Citizenship is required.
• A one-year SES probationary period is required, if not previously completed.
• An initial SES career appointment becomes final only after the individual successfully completes a 1-year probationary period.
• Must successfully complete personnel security vetting (e.g., investigation, evaluation, and adjudication).
• Complete a Declaration for Federal Employment to determine your suitability for Federal employment, at the time requested by the agency.
• Must have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer
• If you are a male applicant born after December 31, 1959, certify that you have registered with the Selective Service System or are exempt from having to do so.
• Go through a Personal Identity Verification (PIV) process that requires two forms of identification from the Form I-9. Federal law requires verification of the identity and employment eligibility of all new hires in the U.S.
• File a Confidential Financial Disclosure Report within 30 days of appointment and annually from then on.
• Disclosure of Political Appointments.
• Veterans' preference is not applicable to the Senior Executive Service.
• All qualification requirements must be met by the closing date of this announcement.

Qualifications

Applicants must meet all qualifications and eligibility requirements by the closing date of this announcement.

To meet the minimum qualifications for the position of Associate Chief Information Officer for Security Operations, applicants must possess the Executive Core Qualifications listed below. Typically, qualified applicants will have gained experience of this nature at or above the (GS)-15 grade level or its equivalent in the public or private sector. To be qualified for this position, your resume must reflect experience in a managerial capacity. Typically, experience of this nature is gained at or above the GS-15 grade level in the Federal service, or its equivalent with state or local government, the private sector, or nongovernmental organizations. As such, your resume must demonstrate that you have the knowledge, skills, and abilities to successfully fulfill responsibilities inherent in most SES positions such as:

• Directing the work of an organizational unit;
• Accountability for the success of one or more specific programs or projects;
• Monitoring progress toward organizational goals and periodically evaluates and makes adjustments to such goals;
• Supervising the work of employees (other than personnel assistants) at least 25% of the time; or
• Exercising important policy-making, policy-determining, or other executive functions

Applicants seeking initial career appointment to the Senior Executive Service (SES) must clearly demonstrate the ability to meet the ECQs within their two (2) page resume (any experience exceeding 2 pages will not be reviewed). OPM's Guide to the Senior Executive Services Qualifications provides detailed information on the ECQs.

In addition to meeting the minimum qualifications, you must also demonstrate the following Executive Core Qualifications (ECQs) and Mandatory Technical Qualifications (MTQs):

EXECUTIVE CORE QUALIFICATIONS (ECQs): By statute, OPM prescribes ECQs for the appointment of career SES members. The ECQs were designed to evaluate executive experience and not technical expertise. The following ECQs provide the focus for certification of executive core qualifications for initial appointment to the Senior Executive Service. Your two-page resume should show that you possess the Executive Core Qualifications.

ECQ 1 - Commitment to the Rule of Law and the Principles of the American Founding: Demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. Leadership Competencies: Knowledge of the American System of Government, Commitment to the Rule of Law, Civic-Mindedness.

ECQ 2 - Driving Efficiency: Demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. Leadership Competencies: Fiscal Responsibility, Managing Resources, Leveraging Technology.

ECQ 3 - Merit and Competence: Demonstrated knowledge, ability, and technical competence to effectively and reliably produce work that is of exceptional quality. Leadership Competencies: Technical Skill, Problem Solving, Agility and Resilience.

ECQ 4 - Leading People: Demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. Leadership Competencies: Accountability, Developing Others, Executive Judgement.

ECQ 5 - Achieving Results: Demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors. Leadership Competencies: Operational Mindset, Innovation, Strategic Thinking.

Additional information about the SES and ECQs can be found on the Office of Personnel Management (OPM) SES Website: Executive Core Qualifications.

MANDATORY TECHNICAL QUALIFICATIONS (MTQs): In addition to the ECQs, candidates must address MTQs. MTQs are designed to assess an applicant's experience relevant to the specific position requirements. All applicants must clearlydemonstrate in their two-page resume, experience and accomplishments related to the MTQs below:

MTQ 1 - IT Security Operations Center (SOC): Demonstrated experience in leading and managing functions of day-to-day operations of a Security Operation Center (SOC), which provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions systems.

MTQ 2 - IT Incident Response: Demonstrated executive knowledge of and experience in IT Incident Response. Demonstrated experience leading operations for a portfolio of enterprise IT Incident Response activities such as incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions.

MTQ 3 - IT Threat Defense: Demonstrated experience in IT Threat Defense in terms of leading a cross-functional team of stakeholders to identify and implement protective controls that minimize an organization's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale.

Please DO NOT submit separate documents addressing the ECQs or MTQs.

Education

This job does not have an education qualification requirement.

Additional information

Veterans' Preference: Is not applicable to positions in the Senior Executive Service.

Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last five (5) years, a political Schedule A, Schedule C, Noncareer SES or Presidential Appointee employee in the Executive Branch, you must disclose this information on your resume and to the Human Resources Office.

Benefits

Help

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.