IT Specialist (INFOSEC)

Southern Arkansas University; Rockville, Northern (MD, KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

We are seeking an IT Specialist (INFOSEC) to optimize IT security for Health Resources and Services Administration-related systems. The role includes evaluating policies, conducting security audits, and advising on risk-based actions to strengthen enterprise security operations.

Responsibilities include presenting findings to the CISO, supporting policy development, and ensuring corrective actions are properly implemented within the Information Systems Security program.

Qualifications

• Requires one year specialized IT experience at GS-13 level or equivalent.
• Demonstrated ability to manage information security policies and risk.
• Experience advising leadership on cybersecurity risks and policies.

Responsibilities

• Review existing IT security policies and recommend updates.
• Conduct security evaluations, risk assessments, and vulnerability assessments.
• Provide inspection results and advisories to leadership; support IT budgets and policy development.
• Serve as senior security expert for Information Systems Security program implementation.
• Coordinate with stakeholders to implement security policies and continuous monitoring.

Skills

Attention to Detail

Customer Service

Decision Making

Information Management

Interpersonal Skills

Oral Communication

Problem Solving

Teamwork

Technical Competency

Job description

You are viewing a preview of this job. Log in or register to view more details about this job.

Link to USAJOBS Announcement: https://www.usajobs.gov/job/880101100

WHAT YOU'LL BE DOING DAY TO DAY

As an IT Specialist (INFOSEC), you will use your knowledge of and experience with Health Resources and Services Administration to optimize business results and customer experience by:

• Reviewing and evaluating adequacy of existing policies, assesses policy needs, and recommends updates to govern IT activities.
• Conducting security evaluations and audits, as well as risk and vulnerability assessments of existing and future information systems to identify vulnerabilities, risks, and protection needs.
• Providing inspection results and reports violations to the CISO in the form of briefings and formal reports and reviews and validates the adequacy of corrective actions taken. Serves as a key technical advisor on information security policy issues.
• Providing management, staff, and customers by interpreting computer security incidents; authoring internal updates, advisories, and technical briefs; assisting with policy development policy; supporting IT budgets formulation; and managing programmatic associated with Information Systems Security with HHS offices, other government agencies, and technical experts.
• Serving as a senior security expert and has responsibility for the implementation and day-to-day operation of the Information Systems Security Program for assigned systems.

Qualifications

WHAT WE ARE LOOKING FOR

Basic Qualifications:

Applicants for the 2210 Information Technology Management series at the GS-14 grade level must have Information Technology (IT) related experience which demonstrates proficiency in the following competencies:

• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change.
• Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems.
• Interpersonal Skills - Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations
• Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
• Teamwork - Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals
• Technical Competency - Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.

Minimum Qualifications: You must have one year specialized experience to perform successfully the duties of the position. To be creditable, specialized experience must have been equivalent to at least the GS-13 grade level in the Federal service performing ALL of the following:

• Directing information security and Assessment & Authorization activities for enterprise systems, ensuring compliance with cybersecurity requirements, risk management standards, and agency policies.
• Advising senior leadership and Authorizing Officials on cybersecurity risks, security assessments, and risk-based recommendations supporting authorization and operational decisions.
• Leading coordination with executives, ISSOs, contractors, and technical teams to implement security policies, manage risk, and strengthen enterprise security operations.
• Interpreting and applying federal cybersecurity laws, regulations, and guidance to develop and implement agency security policies, procedures, and continuous monitoring practices.
• Conducting security evaluations, risk assessments, and technical reviews to identify vulnerabilities, recommend corrective actions, and ensure compliance with organizational security requirements.