Chief Risk Manager

U.S. Department of Veterans Affairs; Salt Lake City (UT); Hybrid; USD 126,000 - 164,000; Full time

Benefits offered by this job

Recruitment incentive

Job summary

U.S. Department of Veterans Affairs in Washington, DC (flexible locations) seeks a Supervisory Information Technology Cybersecurity Specialist (INFOSEC) at GS-2210-15 to lead risk management, governance, and security assessments across VA IT programs.

The role supervises audit and remediation activities, oversees complex IT security issues, and advises senior leadership on information security policy and program integration.

Qualifications

• Supervising or leading cybersecurity, information security, or risk management teams.
• Developing, interpreting, or recommending changes to information security policies, procedures, or risk management frameworks, including NIST RMF.
• Conducting or overseeing IT security audits, assessments, or compliance reviews.
• Preparing and presenting findings, recommendations, and briefings to senior management officials on complex cybersecurity and risk matters.

Responsibilities

• Supervises all areas and tasks within their assigned directorate, therefore must possess knowledge in all areas.
• Directly supervises teams within the formal CPCR audit and inspection process overseeing the remediation process for draft and final reports.
• Monitors performance of all employees assigned to team.
• Provides advice and guidance on a wide range and variety of complex IT issues.
• Makes decisions or recommendations that significantly influence important agency IT policies or programs.
• Ensures rigorous application of information security/information assurance policies, principles, and practices.
• Develops methods to monitor and measure risk, compliance, and assurance efforts.
• Serves as senior expert and consultant to top agency management officials to advise on integrating IT programs with other programs of equivalent scope and complexity.

Job description

Supervisory Information Technology Cybersecurity Specialist (INFOSEC), GS-2210-15

Recruitment Incentive Available - A recruitment incentive is being offered for this position, subject to applicable requirements and eligibility.

Join the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Cybersecurity Specialist, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families.

This high-impact GS-15 supervisory position provides leadership and oversight for cybersecurity risk management, compliance, security assessments, audits, and remediation activities supporting VA information technology systems and programs.

Flexibility - Ad Hoc Telework Flexibility Available, Negotiable With the Supervisor

Compensation - $126,384.00 to $164,301.00 / Per Year, Salary based on GS Base Pay, once a selection is made and the location known, the salary will be determined.

Location Negotiable After Selection - Washington, DC; Hines, IL; Eatontown, NJ; Albany, NY; Philadelphia, PA; Austin, TX; Salt Lake City, UT; Martinsburg, WV; or Shepherdstown, WV.

The selected candidate will:

• Supervises all areas and tasks within their assigned directorate, therefore must possess knowledge in all areas.
• Directly supervises teams within the formal CPCR audit and inspection process overseeing the remediation process for draft and final reports.
• Monitors performance of all employees assigned to team.
• Provides advice and guidance on a wide range and variety of complex IT issues.
• Makes decisions or recommendations that significantly influence important agency IT policies or programs.
• Ensures rigorous application of information security/information assurance policies, principles, and practices.
• Develops methods to monitor and measure risk, compliance, and assurance efforts.
• Serves as senior expert and consultant to top agency management officials to advise on integrating IT programs with other programs of equivalent scope and complexity.

Specialized experience includes:

• Supervising or leading cybersecurity, information security, or risk management teams
• Developing, interpreting, or recommending changes to information security policies, procedures, or risk management frameworks, including NIST RMF
• Conducting or overseeing IT security audits, assessments, or compliance reviews
• Preparing and presenting findings, recommendations, and briefings to senior management officials on complex cybersecurity and risk matters