IT Specialist (INFOSEC)

• Serve as an Information Systems Security Manager (ISSM).
• Provide guidance to Information System Owners (ISO) and Program/System Managers (PM/SM).
• Evaluate and provide cybersecurity guidance and assessment on system development lifecycle efforts.
• Serve as a principal advisor on all matters, technical and otherwise, involving the cybersecurity of an information system.
• Establish guidance and implement a multi-tiered cybersecurity risk management process to protect information and systems.
• Advise the Security Control Assessor and Chief Information Security Officer (CISO) on adequacy of RMF controls within each RMF Package.
• Serve as Subject Matter Expert and provide direct customer support through the assessment and authorization process of the Risk Management Framework.

Conditions of employment

• Must be a U.S. citizen
• Security Requirements: Non-Critical Sensitive with Secret Access
• Appointment is subject to the completion of a favorable suitability or fitness determination, where reciprocity cannot be applied; unfavorably adjudicated background checks will be grounds for removal.
• Selective Service Requirement: Males born after 12-31-59 must be registered or exempt from Selective Service.
• Selectees may start work before drug test results are finalized. A negative result must be confirmed within 30 days of the start date to maintain employment.

Qualifications

To qualify for a IT Specialist (INFOSEC), your resume and supporting documentation must support:

A. Specialized Experience: One year of specialized experience that equipped you with the particular competencies to successfully perform the duties of the position and is directly in or related to this position. To qualify at the GS-13 level, applicants must possess one year of specialized experience equivalent to the GS-12 level or equivalent under other pay systems in the Federal service, military or private sector. Applicants must meet eligibility requirements including minimum qualifications and any other regulatory requirements by the cut-off/closing date of the announcement.

Creditable specialized experience includes:

• Understanding Risk Management Framework (RMF), including the use of Governance, Risk and Compliance (GRC) tools like Enterprise Mission Assurance Support Service (eMASS).
• Familiarity with security audits, Security Technical Implementation Guides (STIGs), vulnerabilities, and remediation efforts.
• Evaluating and implementing security controls in complex system environments.
• In-depth knowledge of Department of Defense (DoD) cybersecurity regulations and policies., For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations., Substitution of education may not be used in lieu of specialized experience for this grade level.