IT SPECIALIST (FUNCTIONAL SECURITY CONTROL ASSESSOR (FSCA) LIAISON)

Naval Facilities Engineering Systems Command; United States; On-site; USD 90,000 - 120,000; Full time

Job summary

Naval Facilities Engineering Systems Command is seeking an IT Specialist (FSCA Liaison) to support the Command Information Office (CIO) within NAVFAC OSF in the United States. The role emphasizes rigor in risk assessment, compliance, and continuous monitoring, with collaboration across offices to implement secure and compliant IT solutions.

The ideal candidate has experience applying RMF and A&A, conducting vulnerability assessments, and integrating cybersecurity policies into system development

Qualifications

• Demonstrated ability to monitor and measure risk, compliance, and assurance efforts.
• Coordinate security activities with clients and stakeholders.
• Effectively present security concepts to diverse audiences.
• Identify and recommend security controls to mitigate risks.

Responsibilities

• Apply RMF and A&A processes to assess packages and maintain security artifacts.
• Conduct risk assessments and vulnerability reviews using cyber defense tools.
• Analyze network architectures and cryptographic controls to strengthen resilience.
• Integrate cybersecurity policies into system development and operations.

Skills

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Job description

You will serve as an IT SPECIALIST (FUNCTIONAL SECURITY CONTROL ASSESSOR (FSCA) LIAISON) in the Command Information Office (CIO) of NAVFAC OSF.

Qualifications: Your resume must demonstrate the following four competencies, as defined: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. IT-related experience demonstrating this competency includes: Developing methods to monitor and measure risk, compliance, and assurance efforts. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. IT-related experience demonstrating this competency includes: Ensuring coordination and/or collaboration on security activities. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. IT-related experience demonstrating this competency includes: Recommending new or revised security measures and countermeasures based on the results of accreditation reviews. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. IT-related experience demonstrating this competency includes: Verifying that application software/network/system security postures are implemented as stated, document deviations, and recommending required actions to correct those deviations. In addition to experience demonstrating the four competencies above, your resume must also demonstrate one year of specialized experience equivalent to the next lower grade level (GS-13) or pay band in the federal service or equivalent experience in the private or public sector performing duties such as: Applying Risk Management Framework (RMF) and Security Assessment & Authorization (A&A) processes to assess authorization packages, maintain security artifacts, and develop comprehensive assessment reports. Conducting risk and vulnerability assessments, system security evaluations, and independent validation audits using cyber defense tools and vulnerability scans to verify security posture and compliance. Analyzing cyber threats, network security architectures, and cryptographic controls to recommend risk mitigations, implement compensating controls, and strengthen system resilience. Integrating cybersecurity policies into system development, migration, and operations while planning security accreditation reviews and monitoring ongoing risk and compliance. and Evaluating emerging threats and security requirements to support continuous risk management, compliance, and mission assurance. Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/ Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.