IT Specialist (INFOSEC)

Cybersecurity Jobs; Salt Lake City (UT); On-site; USD 126,000 - 164,000; Full time

Job summary

The U.S. Department of Veterans Affairs, Office of Information and Technology, seeks an IT Specialist (INFOSEC) to support a complex information security program for privacy and security breach response involving PHI, PII and SPI.

Onsite role in Salt Lake City, UT; duties include coordinating breach responses, data analysis with PSETS, training materials, and audits support, with a mandatory online assessment and background checks.

Qualifications

• U.S. Citizen to apply.
• Selective Service: Registration required for males born after 12/31/1959.
• Online assessment measuring critical general competencies required to perform the job.
• May be required to serve a probationary period.
• Subject to background/security investigation.
• REAL ID-compliant identification required by May 7, 2025.
• Meet all requirements by the closing date: 09/29/2026.
• Experience demonstrating Attention to Detail, Customer Service, Oral Communication, and Problem Solving.

Responsibilities

• Plan, direct, and coordinate privacy and security breach-related information security activities.
• Coordinate breach program responses for external reporting requirements.
• Perform data breach analysis using PSETS and review submissions.
• Direct planning, evaluation, and coordination of privacy breach issues across VA offices.
• Provide coordinated responses to privacy breach audits and maintain secure response files.
• Synchronize VA responses to federal privacy and security initiatives.
• Develop privacy training materials and communications for employees.

Skills

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Job description

The US Department of Veterans Affairs (VA), Office of Information and Technology (OIT) is seeking an IT Specialist (INFOSEC) to support and administer a complex information security program. The role focuses on privacy and security data breach response for PHI, PII, and SPI, including analysis and coordination with internal and external stakeholders.

Location and Schedule

• Worksite: Salt Lake City, UT (onsite)
• Schedule: Monday - Friday, 8:00 am - 4:30 pm (tour of duty may change based on organizational needs)
• Compressed/Flexible: Available at Supervisor's discretion
• Telework: Ad Hoc, as determined by Agency Policy
• Virtual: Not a virtual position

Responsibilities

• Plan, direct, and coordinate a unified VA position on information security related to Privacy and Security breaches involving Protected Health Information (PHI), Personally Identifiable Information (PII), and Sensitive Personal Information (SPI).
• Coordinate VA Privacy and Security data breach program responses for external reporting requirements.
• Perform data breach analysis using the Privacy and Security Events Tracking System (PSETS), including reviewing submissions, prioritizing relevant facts, assessing information provided, identifying errors or incomplete/inconsistent data, and addressing illogical arguments or conclusions.
• Direct the planning, evaluation, and coordination of Privacy and Security breach issues across VA, including Administration and Staff offices.
• Provide coordinated responses and follow-up actions to Privacy and Security data breach audits and external oversight organizations, and maintain secure files of responses and required actions.
• Synchronize and reconcile VA responses to Federal-wide Privacy and Security breach initiatives and proposals.
• Develop privacy training materials and other communications to improve employee understanding of company privacy policies, data handling practices and procedures, and legal obligations.

Technology and References

• Privacy and Security Events Tracking System (PSETS)
• https://niccs.us-cert.gov/workforce-development/cyber-career-pathways
• https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents
• https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/

Salary

USD 125,776 - 163,514 per year

Minimum Experience

1 year

Requirements

• U.S. Citizen to apply
• Selective Service: Registration required for males born after 12/31/1959
• Complete all required steps, including an online assessment measuring critical general competencies required to perform the job
• May be required to serve a probationary period
• Subject to background/security investigation
• Selected applicants must complete an online onboarding process and provide acceptable identification for pre-employment requirements
• Effective May 7, 2025, driver’s licenses or state-issued identification cards that are not REAL ID compliant cannot be used as acceptable forms of identification for employment
• Must meet all requirements by the closing date of this announcement: 09/29/2026
• Information technology-related experience demonstrating all four competencies: Attention to Detail, Customer Service, Oral Communication, and Problem Solving
• One year of specialized experience equivalent to at least the next lower grade in the normal line of progression for the occupation

Evaluation

• Qualifications will be evaluated based on application materials, questionnaire responses, and assessment responses required for the position.
• Competencies assessed include: Accountability, Attention to Detail, Customer Service, Decision Making, Flexibility, Influencing/Negotiating, Integrity/Honesty, Interaction, Interpersonal Skills, Judgment, Learning, Reading Comprehension, Reasoning, Self-Management, Stress Tolerance, and Teamwork.
• USA Hire Assessments use a cut score; applicants must meet or exceed the cut score to be considered.
• Applicants will not be considered if they score below the cut score or fail to complete the assessment.
• Assessment Update Policy: once submitted, assessment responses cannot be revised or updated; numerical rating from the initial submission is final. Eligibility information may be updated and additional supporting documents may be submitted after initial submission but before the closing date.
• Experience must be fully documented on the resume, including job title, duties, month and year start/end dates, and hours worked per week.

Benefits

Eligibility for benefits depends on the type of position and whether it is full-time, part-time, or intermittent.

Agency Clarifications and Work Conditions

• Direct Hire Authority: Filled using Direct-Hire Authority (5 CFR 337.201) for this occupation.
• Remote: Not remote.
• Worksites: OI&T operates multiple worksites; selected individual(s) may be assigned to any federal government location.
• Duty location change: This announcement will not be used to change duty locations for current OIT employees with approved exemptions.
• Relocation/Incentives/PCS: Not authorized
• Physical demands: Primarily sedentary work, with slight physical effort as needed
• Working conditions: Adequately lighted and climate-controlled office; occasional travel may be required

Working Alignment (NICE)

This position is primarily aligned to NICE Cybersecurity Workforce Framework Work Role: Cybersecurity Code 732: Privacy Compliance Manager, supporting privacy compliance program oversight and privacy compliance staffing needs for privacy and security executives and teams.

Required Documents

• Resume

Other accepted documents may include: Cover Letter; Other (1); Performance Appraisal; Resume; Separation Notice (RIF); SF-50/Notification of Personnel Action.

• Applicants may be deemed ineligible if required supporting documentation is not submitted and will not be contacted for additional information.
• If claiming special priority selection rights under I/CTAP and the application is rated well-qualified (score 85 or above), submit: a copy of the agency notice; a copy of the most recent performance rating; and a copy of the most recent SF-50 noting the current position, grade level, and duty location.

Additional Information

• Under the Fair Chance to Compete Act, VA prohibits requesting an applicant’s criminal history prior to accepting a tentative job offer.
• Federal employees may receive annual (vacation) leave based on years served; VA may offer newly appointed Federal employees credit for job-related non-federal experience or active duty uniformed military service if requested and approved prior to appointment.
• ICTAP and CTAP can provide eligible displaced VA competitive service employees selection priority for competitive service vacancies if documentation is submitted and the applicant is found well-qualified (score 85 or above).
• This job opportunity announcement may be used to fill additional vacancies.
• If selected, the individual will be required to report to one of the listed locations, including: Little Rock, AR; North Little Rock, AR; Phoenix, AZ; Anaheim, CA; Long Beach, CA; Los Angeles, CA; Oakland, CA; San Francisco, CA; Aurora, CO; Denver, CO; Washington, DC; Miami, FL; Orlando, FL; St. Petersburg, FL; Tampa, FL; Atlanta, GA; Chicago, IL; Hines, IL; North Chicago, IL; Bedford, MA; Boston, MA; Baltimore, MD; Detroit, MI; Minneapolis, MN; St. Louis, MO; Eatontown, NJ; Albany, NY; Cleveland, OH; Philadelphia, and additional locations shown in the announcement.