Information Technology Specialist (Security) (Direct Hire)

As a classified Cybersecurity Risk Manager (CSRM), in the NASA Cybersecurity and Privacy Division (CSPD), you will provide expertise on policy and procedures, assessments, authorizations, continuous monitoring, and risk management activities for classified information systems. You will collaborate with others to provide guidance, subject matter expertise, and support in identifying, evaluating, communicating, and managing cybersecurity risks., * Validate that security controls are correctly implemented and remain effective throughout the system lifecycle. Design or advise on technical solutions to complex problems which require extensive technical expertise and ingenuity.

• Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
• Lead all classified information system stakeholders by ensuring their assessment readiness, effective continuous monitoring, and ongoing adherence to risk management activities, while providing technical oversight and cybersecurity consultation.
• Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise’s cybersecurity program.
• Performs security analysis of classified environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted government standards and regulations.
• Advise senior management, such as Authorizing Officials, Chief Information Officer (CIO), and Chief Information Security Officer (CISO) on cybersecurity risk levels and security posture.
• Develop methods to monitor and measure risk, compliance, and assurance efforts. Ensure selected security controls operate as intended in every phase of the information system lifecycle.
• Coordinate with program security, cybersecurity management, stakeholders, and other relevant parties to clarify requirements and resolve issues while balancing mission needs against compliance mandates., To qualify for GS-14, you must have one year of directly related specialized experience equivalent to the GS-13 level.
• Providing technical security oversight for complex classified networks and providing guidance to various stakeholders and customers;
• Applying Risk Management Framework (RMF) process and principles, methods and practices against specified requirements/controls (e.g., National Institute of Standards and Technology (NIST) Special Publications 800-37, 800-53, and 800-60) to develop security plans and continuously monitor the cybersecurity posture of networks and information systems;

• Collaborating and negotiating with customers and/or business partners to perform oversight and manage compliance with requirements to ensure an organization’s cybersecurity posture in a risk-based manner that minimizes operational impact., Additional selections may be made for similar positions across NASA within the local commuting area(s) of the location(s) identified in this announcement. By applying, you agree to have your application shared with interested selecting official(s) within NASA. CTAP/ICTAP will be cleared for any additional selection from this announcement. If you have special priority selection rights under the Agency Career Transition Assistance Program (CTAP) or the Interagency Career Transition Assistance Program (ICTAP), you must:

• Indicate your eligibility when applying for a position. The questionnaire asks you to identify your ICTAP/CTAP eligibility.
• Meet the minimum qualifications requirements for the position
• Submit proof that you meet the requirements for CTAP/ICTAP as indicated in ‘Required Documents’

For additional information about CTAP/ICTAP eligibility, click here - https://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/#ictap.

Any applicant that received a Voluntary Separation Incentive Payment (VSIP) from the federal governmentwithin the last five years based of the closing date of this announcement, if selected, may be required to repay the full amount prior to establishing a start date. For additional information on the VSIP repayment requirement, click here - https://www.opm.gov/policy-data-oversight/workforce-restructuring/voluntary-separation-incentive-payments/.

Per Executive Order 14343, this position is not part of a bargaining unit.

Probationary Period

You may be required to serve a one-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. If selected, the requirement to serve such period will be determined by Title 5 of the Code of Federal Regulations, Part 11.

In determining if your employment advances the public interest, we may consider:

• your performance and conduct;

• the needs and interests of the agency;

• whether your continued employment would advance organizational goals of the agency or the Government; and

• whether your continued employment would advance the efficiency of the Federal service.

Upon completion of your probationary period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution., A complete application package includes a resume, required documents and completion of the vacancy announcement questionnaire. Please see this guidance: What to include in your resume. Your resume should describe your specialized experience and support your answers to the vacancy announcement questionnaire. If you are using a Curriculum Vitae (CV) as a resume, it must meet all requirements listed above for a complete resume package.

Please note: if any of the following types of information are included on your resume, your application package will be disqualified:

• Classified or government sensitive information.
• Social Security Number (SSN)
• Photos of yourself
• Personal information, such as age, gender, religious affiliation, etc.
• Encrypted and digitally signed documents.

If your resume contains any of the above information, you must redact that information prior to the submission of your application.

The following documents are required:

• Resume

There may be other supporting documents (licenses, certification, veterans preference, etc.), depending on your answers to the questionnaire and job announcement description, that you may have to submit, please verify your application. Do not submit an OF-306 with your application.

If you are a surplus or displaced employee (CTAP and ICTAP), submit proof that you meet the requirements for CTAP/ICTAP. This includes copies of your agency notice, most recent Performance Rating and most recent Notification of Personnel Action (SF-50) noting current position, grade level, and duty location.

Official documents are required at the time of appointment for verification of eligibility and qualifications.

Do you have experience in Stakeholder management?, Specialized experience is experience that has equipped you with the particular ability, skill, and knowledge to successfully perform the duties of this position and is typically in or related to this line of work., IF you are qualifying based on experience, you MUST also have IT-related experience demonstrating each of the four competencies listed below:

• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

• Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations., This job does not have an education qualification requirement., * Attention to Detail
• Customer Service
• Oral Communication
• Problem Solving

NASA considers paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered., Hampton, VA Remote job No Telework eligible Yes-as determined by the agency policy. Travel Required Occasional travel - You may be expected to travel for this position. Relocation expenses reimbursed No Appointment type Permanent Work schedule Full-time Service Competitive Promotion potential 14 Job family (Series)

• 2210 Information Technology Management

Supervisory status No Security clearance Top Secret Drug test Yes Position sensitivity and risk Critical-Sensitive (CS)/High Risk Trust determination process

• Suitability/Fitness

Financial disclosure No Bargaining unit status No Announcement number HQ-26-DE-12961056-BL Control number 869118900