Senior IT Cybersecurity Risk Manager

U.S. Department of Veterans Affairs; Salt Lake City (UT); Hybrid; USD 126,000 - 164,000; Full time

Benefits offered by this job

Recruitment incentive

Job summary

U.S. Department of Veterans Affairs in Washington, DC (flexible locations) seeks a Supervisory Information Technology Cybersecurity Specialist (INFOSEC) at GS-2210-15 to lead risk management, governance, and security assessments across VA IT programs.

The role supervises audit and remediation activities, oversees complex IT security issues, and advises senior leadership on information security policy and program integration.

Qualifications

• Supervising or leading cybersecurity, information security, or risk management teams.
• Developing, interpreting, or recommending changes to information security policies, procedures, or risk management frameworks, including NIST RMF.
• Conducting or overseeing IT security audits, assessments, or compliance reviews.
• Preparing and presenting findings, recommendations, and briefings to senior management officials on complex cybersecurity and risk matters.

Responsibilities

• Supervises all areas and tasks within their assigned directorate, therefore must possess knowledge in all areas.
• Directly supervises teams within the formal CPCR audit and inspection process overseeing the remediation process for draft and final reports.
• Monitors performance of all employees assigned to team.
• Provides advice and guidance on a wide range and variety of complex IT issues.
• Makes decisions or recommendations that significantly influence important agency IT policies or programs.
• Ensures rigorous application of information security/information assurance policies, principles, and practices.
• Develops methods to monitor and measure risk, compliance, and assurance efforts.
• Serves as senior expert and consultant to top agency management officials to advise on integrating IT programs with other programs of equivalent scope and complexity.

Job description

U.S. Department of Veterans Affairs in Washington, DC (flexible locations) seeks a Supervisory Information Technology Cybersecurity Specialist (INFOSEC) at GS-2210-15 to lead risk management, governance, and security assessments across VA IT programs.

The role supervises audit and remediation activities, oversees complex IT security issues, and advises senior leadership on information security policy and program integration.