Chief Risk Manager

U.S. Department of Veterans Affairs; Austin (TX); Hybrid; USD 126,000 - 164,000; Full time

Job summary

U.S. Department of Veterans Affairs (VA) seeks a Supervisory Information Technology Cybersecurity Specialist to lead cybersecurity risk management, policy, and audit activities across VA IT systems.

The role provides senior-level guidance, oversight of remediation efforts, and alignment with agency IT strategies. The position emphasizes supervision of teams, advisory support to senior management, and strong governance across information security programs, with flexible telework options and a

Qualifications

• Supervisory experience in cybersecurity, information security, or risk management teams.
• Experience developing or interpreting information security policies and RMF (NIST).
• Experience conducting IT security audits, assessments, or compliance reviews.
• Ability to brief senior management on complex cybersecurity matters.

Responsibilities

• Supervise all areas and tasks within the directorate and oversee remediation.
• Directly supervise teams within CPCR audit and inspection process.
• Monitor performance of all employees on the team.
• Advise on a wide range of IT issues and make policy-impacting recommendations.
• Ensure application of information security policies and risk practices.
• Develop methods to monitor risk, compliance, and assurance.
• Advise senior agency management on integrating IT programs.

Skills

Leadership

Cybersecurity

Risk management

IT policy

Audits/assessments

Stakeholder communication

Job description

Supervisory Information Technology Cybersecurity Specialist (INFOSEC), GS-2210-15

Recruitment Incentive Available - A recruitment incentive is being offered for this position, subject to applicable requirements and eligibility.

Join the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Cybersecurity Specialist, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families.

This high-impact GS-15 supervisory position provides leadership and oversight for cybersecurity risk management, compliance, security assessments, audits, and remediation activities supporting VA information technology systems and programs.

Flexibility - Ad Hoc Telework Flexibility Available, Negotiable With the Supervisor

Compensation - $126,384.00 to $164,301.00 / Per Year, Salary based on GS Base Pay, once a selection is made and the location known, the salary will be determined.

Location Negotiable After Selection - Washington, DC; Hines, IL; Eatontown, NJ; Albany, NY; Philadelphia, PA; Austin, TX; Salt Lake City, UT; Martinsburg, WV; or Shepherdstown, WV.

The selected candidate will:

• Supervises all areas and tasks within their assigned directorate, therefore must possess knowledge in all areas.
• Directly supervises teams within the formal CPCR audit and inspection process overseeing the remediation process for draft and final reports.
• Monitors performance of all employees assigned to team.
• Provides advice and guidance on a wide range and variety of complex IT issues.
• Makes decisions or recommendations that significantly influence important agency IT policies or programs.
• Ensures rigorous application of information security/information assurance policies, principles, and practices.
• Develops methods to monitor and measure risk, compliance, and assurance efforts.
• Serves as senior expert and consultant to top agency management officials to advise on integrating IT programs with other programs of equivalent scope and complexity.

Specialized experience includes:

• Supervising or leading cybersecurity, information security, or risk management teams
• Developing, interpreting, or recommending changes to information security policies, procedures, or risk management frameworks, including NIST RMF
• Conducting or overseeing IT security audits, assessments, or compliance reviews
• Preparing and presenting findings, recommendations, and briefings to senior management officials on complex cybersecurity and risk matters