Executive Director, Chief Information Security Officer (XD, CISO)

Summary

This position is located in the Department of Homeland Security (DHS), Management Directorate, Office of the Chief Information Office (OCIO). The DHS OCIO is responsible for all matters relating to information and DHS information environment including customer experience, network operations, information systems, information assurance, defensive cybersecurity, and communications.

Duties

Help

The Executive Director, Chief Information Security Officer (XD, CISO) serves as the principal advisor to the CIO for the DHS enterprise information security program. The XD, CISO is responsible for performing and supervising work associated with risk management, policy, compliance, and oversight in alignment with DHS strategic direction. Through planning, analysis, development, implementation, maintenance, and enhancement of information security programs, policies, procedures, and tools, the XD, CISO provides the cyber security oversight for enterprise Information Technology (IT) services across DHS.

Specific responsibilities include:

• Serves as the senior advisor to the Chief Information Officer (CIO) regarding development, publication, and implementation of Departmental information security policies, standards, and guidance, as well as coordination, integration, training, and enforcement of all aspects of the Department's information security program.
• Responsible for leading the statutory mandated Information Security Program under the Federal Information Security Modernization Act of 2014.
• Oversees the DHS Information Security Program to support the Department's implementation of all applicable regulatory requirements including the Computer Security Act, Federal Information Security Management Act (FISMA), the Clinger-Cohen Act, relevant Office of Management and Budget (OMB) Circulars, Executive Orders, Homeland Security Presidential Directives and Congressional inquiries.
• Responsible for planning and implementing the Department-wide security enhancement initiatives; following all applicable laws, directives, policies, and directed actions and providing methodologies, tools, guidance, and subject matter expertise to help ensure Component's information security programs can meet federal compliance and reporting requirements.
• Effectively communicates the information security strategic plan to every Component and drives the implementation for the department's strategic information security management plan, including coordination between all component information security organizations throughout DHS.
• Exercises broad and deep IT knowledge coupled with equivalent knowledge of the activities of those businesses and other organizations that use and exploit IT.
• Communicates the potential impact of emerging security technologies on organizations as well as individuals and analyzes the risks of using or not using such technologies.
• Assesses the impact of legislation and actively promotes compliance. Takes the initiative to keep both their own and subordinates' skills current and maintains an awareness of developments in IT.
• Ensures the confidentiality, integrity, and availability of sensitive information stored on and processed by the operational information technology systems supporting the various mission elements of the Department to avoid it from being adversely impacted.
• Provides executive level direction in planning, implementing and evaluating long range IT activities to support DHS strategic business plans and cross-functional business solutions.
• Responsible for aligning resources (money, people, time and technology) appropriately for IT support for achievement of the DHS mission and tasks. Follows current IT government and industry organizational innovations (process redesign or reengineering models and methods) and regularly reassesses current operations based upon descriptions of best practices.

Requirements

Help

Conditions of employment

• You must be a U.S. citizen to apply for this position.
• If you are a male applicant born after December 31, 1959, certify that you have registered with the Selective Service System or are exempt from having to do so.
• May be subject to pre-employment and random drug tests.
• You may be required to obtain and maintain an interim and/or final security clearance prior to entrance on duty. Failure to obtain and maintain the required level of clearance may result in the withdrawal of a job offer or removal.
• File a Confidential Financial Disclosure Report OGE-278e within 30 days of appointment and annually from then on.
• Subject to a 1-year supervisory probationary period (unless already completed).
• Complete a Declaration for Federal Employment to determine your suitability for Federal employment, at the time requested by the agency.

Qualifications

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race, sex, color, religion, or national origin.

Applicants must demonstrate that they meet the Basic Requirements, and must meet the Minimum Qualifications requirements for this position.

BASIC REQUIREMENTS: To meet the minimum qualifications for this position, you must meet the Basic Requirements: Individuals must have IT-related experience demonstrating each of the four competencies listed below:

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

MINIMUM QUALIFICATIONS: To meet the minimum qualification requirements for this position, you must show that you possess the Executive Core Qualifications (ECQ) and Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit, will not be reviewed beyond page 2 or may be disqualified. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position.

There is NO requirement to prepare a narrative statement specifically addressing the Executive Core Qualifications (ECQs) or the Technical Qualifications (TQs). A sample 2-pages resume that incorporates ECQs and TQs can be viewed on this link (indexed at page 16 - 17) Guide to Senior Executive Service Qualifications and the Qualifications Review Board.

TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications.

TQ 1: Demonstrated expertise in IT security planning, development, and management of enterprise application delivery and IT services, including end-to-end security requirements management for enterprise IT services. Possesses expert-level knowledge of applicable directives, security policies, procedures, and standards to ensure that application delivery and quality assurance programs align with agency mission requirements across multiple departments.

TQ 2: Demonstrated comprehensive understanding of IT security concepts, theories, practices, and standards. Serves as a foremost authority in security architectural planning and provides senior-level guidance to agency leadership.

TQ 3: Demonstrated expertise in security architectural planning and provides guidance to peers at Headquarters and subordinate agencies. Advises on a broad range of situations and issues involving the application or adaptation of new theories, concepts, principles, standards, methods, and practices.

EXECUTIVE CORE QUALIFICATIONS (ECQs): In addition to the Technical Qualification Requirements listed above, all new entrants into the Senior Executive Service (SES) under a career appointment will be assessed for executive competency against the following five mandatory ECQs. If your 2-page resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for the position.

There are five ECQs:

• ECQ 1: Commitment to the Rule of Law and the Principles of the American Founding - This core qualification requires a demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people.
• ECQ 2: Driving Efficiency - This core qualification involves the demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades.
• ECQ 3: Merit and Competence - This core qualification involves the demonstrated knowledge, ability and technical competence to effectively and reliably produce work that is of exceptional quality.
• ECQ 4: Leading People - This core qualification involves the demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable.
• ECQ 5: Achieving Results - This core qualification involves the demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors.

Detailed information on each ECQs, the underlying and fundamental competencies, and information regarding the Structured Interview QRB (SIQRB) Process are available in the "Guide to Senior Executive Service Qualifications and the Qualifications Review Board."

Note: If you are a member of the SES or have been certified through successful participation in an OPM approved SES Candidate Development Program (SESCDP), or have SES reinstatement eligibility, you do not need to respond to the ECQs. Instead, you should attach proof (e.g., SF-50, Certification by OPM's SES Qualifications Review Board (QRB)) of your eligibility for noncompetitive appointment to the SES.

Veterans Preference: Veterans' preference is not applicable to the SES.

Current or Former Political Appointees: OPM must authorize any employment offers made to current or former (within the last 5 years) political Schedule A, Schedule C, or Non-career SES employees in the executive branch. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, or Noncareer SES employee in the executive branch, you must disclose that to the DHS Headquarters Executive Services team.

Education

There is no educational requirement for this position.

Additional information

Permanent Change of Duty Station (PCS) Expenses will not be paid.

Recruitment/Relocation/Retention Incentive may be authorized at Management's discretion.

Mobility: Organizational and geographical mobility is essential in developing and managing SES leaders. Individuals selected for SES positions members may be subject to reassignment across geographical, organizational, and functional lines, and may be required to sign a Reassignment Rights and Obligation Agreement.

If you are unable to apply online or need to fax a document you do not have in electronic form, please contact Valerie Hopkins via email at [redacted] .