IT Specialist (INFOSEC)

US Bureau of the Fiscal Service; Birmingham (AL); On-site; USD 85,000 - 110,000; Full time

Job summary

The US Bureau of the Fiscal Service, Information Assurance Division, seeks an advanced IT Specialist (INFOSEC) / Information System Security Officer to advise the System Owner, Authorizing Official and CISO on security matters for mission-critical systems.

Applicants must meet specialized experience in RMF/NIST, documenting security controls, tracking findings and coordinating with system owners, security personnel, cloud providers and technical teams.

Qualifications

• Experience as an Information System Security Officer or equivalent role.
• Security of systems, applications, or cloud services following RMF or comparable standards.

Job description

This position is located at Bureau of the Fiscal Service, Information Assurance Division. As an advanced IT Specialist (INFOSEC) Information System Security Officer (ISSO), you will serve as a principal advisor to the System Owner, Authorizing Official, and Chief Information Security Officer (CISO) on all matters (technical and otherwise) involving security of assigned systems that provide or support mission essential functions.

You must meet the following requirements by the closing date of this announcement.

The experience may have been gained in either the public, private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year and indicate number of hours worked per week on your résumé.

For the GS-13, you must have one year of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized Experience for this position includes: Specialized Experience for the GS-13, you must have one year (full 52 weeks) of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized experience for this position includes:

• Experience as an Information System Security Officer, or equivalent role, responsible for the security of systems, applications, or cloud services following the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) or comparable cybersecurity standards; AND
• Experience maintaining security documentation, assessing security controls, tracking findings or vulnerabilities including the development and execution of remediation actions and/or risk mitigations or exceptions; AND
• Experience coordinating with system owners, security personnel, cloud service providers, and technical teams on audits, assessment, incident response, configuration reviews, change reviews, or cloud security reviews.

In addition to meeting specialized experience, individuals must meet proficiency levels in each of the following competencies:

Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork, and Technical Competence.

A competency assessment will be used to determine whether you meet the required competency proficiency levels. Once this announcement closes, eligible applicants will receive an email containing an exclusive link to access and complete Phase 2 of the application process.

For the required proficiency levels and competency definitions, please see the following link: Competency-Based Qualification Standard for the Information Technology Management Series, 2210