IT Specialist (INFOSEC)

Towson; Rockville, Northern (MD, KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Towson, in partnership with the Health Resources and Services Administration, seeks an IT Specialist (INFOSEC) to optimize IT security and policy governance. You will lead evaluations, risk assessments, and remediation actions for enterprise systems.

The role requires coordinating with executives, ISSOs, contractors, and technical teams to strengthen enterprise security operations and ensure compliance with federal guidelines.

Qualifications

• One year specialized IT security experience at GS-13 or equivalent.
• Experience advising senior leadership on cybersecurity risks and mitigation.
• Ability to interpret federal cybersecurity laws and guide policy implementation.

Responsibilities

• Review and update IT security policies and governance.
• Conduct security evaluations, risk assessments, and vulnerability tests.
• Report findings and corrective actions to CISO and stakeholders.
• Interpret security incidents and produce advisories and briefs for multiple teams.
• Oversee the Information Systems Security Program for assigned systems.

Skills

Attention to detail

Customer service

Decision making

Information management

Interpersonal skills

Oral communication

Problem solving

Teamwork

Technical competency

Education

Bachelor's degree in a related field

Job description

You are viewing a preview of this job. Log in or register to view more details about this job.

Link to USAJOBS Announcement: https://www.usajobs.gov/job/880101100

WHAT YOU'LL BE DOING DAY TO DAY

As an IT Specialist (INFOSEC), you will use your knowledge of and experience with Health Resources and Services Administration to optimize business results and customer experience by:

• Reviewing and evaluating adequacy of existing policies, assesses policy needs, and recommends updates to govern IT activities.
• Conducting security evaluations and audits, as well as risk and vulnerability assessments of existing and future information systems to identify vulnerabilities, risks, and protection needs.
• Providing inspection results and reports violations to the CISO in the form of briefings and formal reports and reviews and validates the adequacy of corrective actions taken. Serves as a key technical advisor on information security policy issues.
• Providing management, staff, and customers by interpreting computer security incidents; authoring internal updates, advisories, and technical briefs; assisting with policy development policy; supporting IT budgets formulation; and managing programmatic associated with Information Systems Security with HHS offices, other government agencies, and technical experts.
• Serving as a senior security expert and has responsibility for the implementation and day-to-day operation of the Information Systems Security Program for assigned systems.

Qualifications

WHAT WE ARE LOOKING FOR

Basic Qualifications:

Applicants for the 2210 Information Technology Management series at the GS-14 grade level must have Information Technology (IT) related experience which demonstrates proficiency in the following competencies:

• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change.
• Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems.
• Interpersonal Skills - Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations
• Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
• Teamwork - Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals
• Technical Competency - Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.

Minimum Qualifications: You must have one year specialized experience to perform successfully the duties of the position. To be creditable, specialized experience must have been equivalent to at least the GS-13 grade level in the Federal service performing ALL of the following:

• Directing information security and Assessment & Authorization activities for enterprise systems, ensuring compliance with cybersecurity requirements, risk management standards, and agency policies.
• Advising senior leadership and Authorizing Officials on cybersecurity risks, security assessments, and risk-based recommendations supporting authorization and operational decisions.
• Leading coordination with executives, ISSOs, contractors, and technical teams to implement security policies, manage risk, and strengthen enterprise security operations.
• Interpreting and applying federal cybersecurity laws, regulations, and guidance to develop and implement agency security policies, procedures, and continuous monitoring practices.
• Conducting security evaluations, risk assessments, and technical reviews to identify vulnerabilities, recommend corrective actions, and ensure compliance with organizational security requirements.