Summary

This position is located in the Department of Health and Human Services, Office of Inspector General, Office of Management and Policy.

This announcement is to fill one vacancy that may be located in any of the locations identified. The salary for this position will be adjusted based on the duty location. View the Office of Personnel Management (OPM) pay charts for more information.

This announcement will close when 150 applications are received or on the closing date, whichever comes first.

Duties

Help

The incumbent will serve as the Chief Information Security Officer (CISO) and will be responsible for performing the following duties and responsibilities, which include but are not limited to:

• Provide broad policy analysis, consultation, advice, and program management in information security, risk, and privacy, promoting sound security and privacy methods and best industry practices.
• Oversee the organization's Security Program, including planning, coordinating, and controlling information system security and privacy across all systems, devices, and communications platforms.
• Manage compliance with Federal information security and privacy requirements, including FISMA, the Computer Security Act, the Clinger-Cohen Act, and OMB Circular A-130.
• Develop and implement organization-wide plans and programs for IT security, including policies and procedures for threat and risk assessment, planning, risk management, training, program oversight, and evaluation.
• Serve as a focal point for IT security audits and evaluations and manage the enterprise-wide project plan for mitigating IT security vulnerabilities as required under FISMA.
• Coordinate regular testing of telecommunications networks and IT resources to ensure compliance with established security standards and practices.
• Provide expert advice to senior leadership, including the HHS CISO, program officials, and technical staff, and prepare briefings and recommendations on significant IT security issues.
• Plan, organize, and direct the activities of subordinate staff, ensuring IT programs comply with legal and regulatory requirements and meet operational needs.

Requirements

Help

Conditions of employment

• U.S Citizenship is required.
• Registration with the Selective Service (if applicable).
• Suitability for Federal employment determined by background investigation.
• One-year probationary period may be required.
• Confidential financial disclosure report (OGE-450) is required.
• Must be able to obtain/maintain a Top-Secret/SCI Clearance.
• This is a Testing Designated Position. Incumbent must pass drug screening prior to appointment. The Incumbent will also be subject to unannounced random drug testing for the duration of their time in this position.
• One-year Supervisory Probationary Period may be required.

Qualifications

Applicants must meet all the qualification requirements, including education, and any selective placement factors described below within 30 days of the closing date of this announcement.

Basic Qualifications: In order to meet basic qualifications for GS-2210 positions, individuals must have IT related experience demonstrating each of the competencies defined below

• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change.
• Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems.
• Interpersonal Skills - Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations
• Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
• Teamwork - Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals.
• Technical Competency - Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.

In addition to the experience above applicants must have 1 year of specialized experience equivalent to the next lower grade level in the Federal service which provided the applicant with the knowledge, skills and abilities to perform the duties of the position. Qualifying specialized experience must demonstrate the following:

(1) Experience leading enterprise information security programs and cybersecurity governance in compliance with FISMA, OMB Circular A-130, and other federal information security legislation, directives, and standards;

(2) Experience applying federal cybersecurity frameworks including NIST SP 800-53, NIST Risk Management Framework (SP 800-37), Zero Trust Architecture (SP 800-207), and the NIST Cybersecurity Framework;

(3) Experience overseeing security authorization, risk assessments, continuous monitoring, and authority to operate (ATO) processes for enterprise information systems; and

(4) Experience providing supervisory oversight of multi-disciplinary information security teams (e.g., governance/risk/compliance, cloud security, identity & access management, threat detection & response) in a large or complex organization.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Your resume should include the dates of all qualifying experience (from month/year to month/year) and the number of hours worked/volunteered per week. Federal experience is not required. The experience may have been gained in the public sector, private sector or Volunteer Service. One year of experience refers to full-time work; part-timework is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/year, and indicate number of hours worked per week, on your resume.

Education

Education is not qualifying for this position.

Additional information

Recruitment Incentives: Payment for relocation expenses may not be authorized for this position. A recruitment bonus may not be offered. Repayment of student loans may not be offered. Private sector work experience will not be approved as credit for your Annual Leave accrual.

Security and Background Requirements: A background security investigation will be required for all appointees. Appointment will be subject to the applicant's successful completion of a background security investigation and favorable adjudication. Failure to successfully meet these requirements may be grounds for appropriate personnel action. In addition, if hired, a background security reinvestigation or supplemental investigation may be required at a later time. Applicants are also advised that all information concerning qualifications is subject to investigation. False representation may be grounds for non-consideration, non-selection and/or appropriate disciplinary action.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

Benefits

Help

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.