Assessments & Compliance Lead

U.S.-Securities-and-Exchange-Commission; Washington (District of Columbia); On-site; USD 110,000 - 140,000; Full time

Job summary

The U.S. Securities and Exchange Commission, Office of Information Technology, is seeking an Information Technology Specialist (INFOSEC) (Assessments & Compliance Lead) in the Washington, DC Office.

You will join a respected team responsible for providing assurance that SEC IT systems are protected against threats and vulnerabilities and for ensuring compliance with federal mandates such as FISMA. Collaborating with stakeholders, you will lead assessments, monitoring, and risk-based actions to

Qualifications

• Attention to detail, customer service, oral communication, and problem solving qualities required by the role.

Responsibilities

• Provide assurance that SEC IT systems are protected against threats and vulnerabilities and ensure compliance with federal mandates such as FISMA.

Skills

Information Systems/Network Security

Problem Solving

Risk Management

Technical Communication

Job description

The Office of Information Technology is seeking an Information Technology Specialist (INFOSEC)(Assessments & Compliance Lead) in the Washington, DC Office.

As an Assessments & Compliance Lead, you will join a well-respected team that is responsible for providing assurance that SEC IT systems are protected against potential IT threats and vulnerabilities and for ensuring compliance with federal mandates and legislation, including the Federal Information Security Modernization Act (FISMA).

Applicants are responsible for confirming all required materials are submitted by the closing date of the announcement. Please check the How You Will Be Evaluated and Required Documents sections carefully, as missing documents will render the application incomplete and ineligible for review.

Qualifying experience may be obtained in the private or public sector. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. All qualification requirements must be met by the closing date of this announcement.

BASIC REQUIREMENT

1. Attention to Detail: Is thorough when performing work and conscientious about attending to detail.
2. Customer Service: Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication: Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving: Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

MINIMUM QUALIFICATION REQUIREMENT

In addition to meeting the basic requirement, applicants must also meet the minimum qualification requirement.

SK-14

Applicant must have at least one year of specialized experience equivalent to the GS/SK-13 level:

1. Leading, performing, and overseeing independent security assessments and information security continuous monitoring; AND
2. Conducting briefings and meetings targeted towards an audience with a wide range of IT knowledge regarding implementation status of IT security controls and corrective actions; AND
3. Developing, implementing, and coordinating activities designed to ensure, protect, and restore IT systems, services, and capabilities; AND
4. Evaluating risks associated with deploying, protecting, and using information and technology across a dispersed and diverse environment to make recommendations on approaches in mitigating risk.

ACCOMPLISHMENT RECORD COMPETENCIES

Your Accomplishment Record narratives should address the following competencies. See the How You Will Be Evaluated section below for more information:

• Competency 1: Information Systems/Network Security - Implements and uses methods, tools, and procedures, including the development of information security plans and standards, to prevent information systems vulnerabilities and provide or restore privacy and security of applications, information systems, and/or network services.
• Competency 2: Problem Solving and Decision Making Ability to identify and solve important problems relevant to program areas through sound and timely decision making, even in less than ideal situations, with little or no guidance.
• Competency 3: Risk Management and Disaster Recovery - Uses methods and tools for risk assessment and mitigation of risk, including the identification, assessment, and prioritization of risks to minimize, monitor, and control the probability and/or impact of events.
• Competency 4: Technical Communication - Translates technical information into non-technical terms and accurately convey technical information to end users (e.g., staff, management) and outside parties, including the technical documentation of applications, systems, Standard Operating Procedures, etc.