Lead IT Cybersecurity Specialist — Enterprise RMF & Resilience

Bureau of Alcohol, Tobacco, Firearms, and Explosives (ATF); Washington (District of Columbia); On-site; USD 140,000 - 170,000; Full time

Job summary

Bureau of Alcohol, Tobacco, Firearms, and Explosives (ATF) is seeking a Chief Information Security Officer (CISO) in the Office of Science and Technology (OST), Office of Cybersecurity, to lead enterprise IT security strategies and risk management. The role supports ATF's regulatory, criminal enforcement, and administrative missions from Washington, DC.

The position emphasizes expertise in RMF, FISMA, NIST guidance, and integration of cybersecurity into enterprise architecture and operations.

Qualifications

• One year of specialized experience equivalent to GS-14 or higher.
• Technical authority in cybersecurity theories, principles, concepts, standards, methods and practices.
• Experience managing enterprise security programs under FISMA, OMB, NIST guidance, and RMF.
• Experience directing risk-management activities including POA&M and continuous monitoring.
• Experience integrating cybersecurity requirements into enterprise architecture and mission operations.

Responsibilities

• Serve as technical authority in cybersecurity theories and practices.
• Manage enterprise-level security programs in line with FISMA, RMF, and NIST guidance.
• Implement cybersecurity resilience and ensure compliance with federal requirements.
• Direct agency cybersecurity risk-management activities including RMF and POA&M.
• Integrate cybersecurity requirements into enterprise architecture and investments.

Skills

Cybersecurity principles

Risk management

RMF

Security assessments

Vulnerability remediation

Job description

Bureau of Alcohol, Tobacco, Firearms, and Explosives (ATF) is seeking a Chief Information Security Officer (CISO) in the Office of Science and Technology (OST), Office of Cybersecurity, to lead enterprise IT security strategies and risk management. The role supports ATF's regulatory, criminal enforcement, and administrative missions from Washington, DC.

The position emphasizes expertise in RMF, FISMA, NIST guidance, and integration of cybersecurity into enterprise architecture and operations.