Senior IT Security Leader (INFOSEC)

Cybersecurity Jobs; San Francisco (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

HHS OIG seeks a Supervisory IT Specialist (INFOSEC) to lead enterprise information security programs and govern risk/privacy across the organization while ensuring federal compliance. The role guides senior leadership and technical staff, coordinating security activities and audits.

Responsibilities include managing the Security Program, implementing risk management, and ensuring adherence to FISMA, NIST frameworks, and OMB policies. Strong leadership and regulatory knowledge are essential.

Qualifications

• 1 year of specialized experience in enterprise information security programs.
• Experience applying federal cybersecurity frameworks (NIST SP 800-53, RMF, NIST CSF).
• Able to obtain and maintain a Top-Secret/SCI clearance.
• Supervisory oversight of multi-disciplinary information security teams.

Responsibilities

• Provide broad policy analysis, consultation, and program management for information security, risk, and privacy.
• Oversee the Security Program across systems, devices, and communications platforms.
• Manage compliance with federal information security and privacy requirements (FISMA, OMB Circular A-130).
• Develop and implement organization-wide IT security plans and risk programs.
• Act as focal point for IT security audits and evaluations, and manage vulnerability mitigation efforts under FISMA.
• Coordinate regular testing of networks and IT resources to ensure security standards.
• Provide guidance to senior leadership and prepare briefings on significant security issues.
• Plan, organize, and direct staff to ensure IT programs meet regulatory requirements.

Skills

Attention to Detail

Customer Service

Decision Making

Information Management

Interpersonal Skills

Oral Communication

Problem Solving

Teamwork

Technical Competency

Tools

NIST SP 800-53

NIST RMF (SP 800-37)

Zero Trust Architecture (SP 800-207)

NIST Cybersecurity Framework

ATO Process

Job description

HHS OIG seeks a Supervisory IT Specialist (INFOSEC) to lead enterprise information security programs and govern risk/privacy across the organization while ensuring federal compliance. The role guides senior leadership and technical staff, coordinating security activities and audits.

Responsibilities include managing the Security Program, implementing risk management, and ensuring adherence to FISMA, NIST frameworks, and OMB policies. Strong leadership and regulatory knowledge are essential.