Supervisory IT Cybersecurity Specialist

Deputy Assistant Secretary for Information and Technology; United States; On-site; USD 85,000 - 120,000; Full time

Job summary

VA's Office of Information Security (OIS) under OIT seeks an IT Cybersecurity Specialist to enhance the security posture of VA’s IT systems and protect Veteran data. The role supports enterprise-wide strategy, policy, governance, and defense through collaboration with VA and OIT.

Applicants must meet all qualifications by 10/19/2026, including specialized experience in leading IT security programs, risk assessments, and presenting findings to senior management. Federal experience preferred.

Qualifications

• Attention to Detail: thorough and conscientious about detail.
• Customer Service: works with clients to assess needs and provide service.
• Oral Communication: communicates ideas clearly to audiences.
• Problem Solving: identifies problems and evaluates solutions.

Skills

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Job description

Join the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Cybersecurity Specialist, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families.

To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 10/19/2026. You must meet the Minimum Qualification Requirements, Specialized Experience and Selective Placement Factors to qualify for this series as described below.

Minimum Qualifications Requirements

Minimum Qualifications Requirements: To qualify for this position, you must have information technology-related experience demonstrating all of the four competencies listed below. Ensure that this experience is clearly described in your resume:

• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Specialized Experience

Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade in the normal line of progression for the occupation in the organization. Specialized experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT. Specialized experience for this position is defined as supervising or leading a team of IT specialists and/or program analysts responsible for evaluating an organization's compliance with information security or risk management policies and standards; developing, interpreting, or recommending changes to information security/information assurance policies, procedures, or risk management frameworks (e.g., NIST Risk Management Framework) at an enterprise or agency-wide level; conducting or overseeing IT security audits, assessments, or reviews to identify vulnerabilities, determine compliance with published standards, and recommend mitigation strategies; and preparing and presenting findings, recommendations, or briefings to senior management officials on complex or controversial IT security/risk issues.

Selective Placement Factor

Selective Placement Factor: This position includes a skill, knowledge, ability or other worker characteristic basic to -and essential for- satisfactory performance of the job. Selective Placement Factors are a prerequisite to appointment and represent minimum requirements for a position. Applicants who do not meet it are ineligible for further consideration. Evidence of the Selective Placement Factor must be reflected in your resume.

Selective Placement Factor #1: Experience defining and applying principles and theories of common enterprise architecture and risk management approaches to include purpose (duty to protect), mission need (risk assessment), and controls (design controls to protect) aligned with the NIST RMF throughout the planning, programming, budgeting, and execution (PPBE) cycle.

Selective Placement Factor #2: Experience holistically evaluating internal and external perspectives; conducts assessment of threats and vulnerabilities,determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and nonoperational situations. Evidence of all of these requirements must be reflected in your resume. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; relig