Supervisory IT Cybersecurity Specialist-Direct Hire

Bureau of Alcohol, Tobacco, Firearms, and Explosives (ATF); Washington (District of Columbia); On-site; USD 140,000 - 170,000; Full time

Job summary

Bureau of Alcohol, Tobacco, Firearms, and Explosives (ATF) is seeking a Chief Information Security Officer (CISO) in the Office of Science and Technology (OST), Office of Cybersecurity, to lead enterprise IT security strategies and risk management. The role supports ATF's regulatory, criminal enforcement, and administrative missions from Washington, DC.

The position emphasizes expertise in RMF, FISMA, NIST guidance, and integration of cybersecurity into enterprise architecture and operations.

Qualifications

• One year of specialized experience equivalent to GS-14 or higher.
• Technical authority in cybersecurity theories, principles, concepts, standards, methods and practices.
• Experience managing enterprise security programs under FISMA, OMB, NIST guidance, and RMF.
• Experience directing risk-management activities including POA&M and continuous monitoring.
• Experience integrating cybersecurity requirements into enterprise architecture and mission operations.

Responsibilities

• Serve as technical authority in cybersecurity theories and practices.
• Manage enterprise-level security programs in line with FISMA, RMF, and NIST guidance.
• Implement cybersecurity resilience and ensure compliance with federal requirements.
• Direct agency cybersecurity risk-management activities including RMF and POA&M.
• Integrate cybersecurity requirements into enterprise architecture and investments.

Skills

Cybersecurity principles

Risk management

RMF

Security assessments

Vulnerability remediation

Job description

The Chief Information Security Officer (CISO) will work in the Office of Science and Technology (OST), Office of Cybersecurity.

This position supports enterprise IT capabilities that enable ATF's regulatory, criminal enforcement, and administrative missions.

Direct-Hire Authority (DHA) is a hiring authority granted by the Office of Personnel Management (OPM) to address critical hiring needs or severe candidate shortages.

To qualify for the Supervisory IT Cybersecurity Specialist position at the GS-15 grade level, candidates must meet the following specialized experience by the closing date of this announcement.

Specialized experience is demonstrated experience, which has equipped the applicant with the particular knowledge, skills and abilities to perform successfully the duties of this position. Experience must be in the normal line of progression or must be related to the work of the position advertised and must be reflected in resume.

EXPERIENCE:

Candidates must have at least one year of specialized experience equivalent to the next lower grade level (GS-14) (obtained in either the public or private sectors). This experience must include all of the following:

• Serving as a technical authority in cybersecurity theories, principles, concepts, standards, methods, and practices; AND
• Managing enterprise-level security programs involving Federal information security law and policy, Office of Management and Budget (OMB) requirements, National Institute of Standards and Technology (NIST) guidance, the Federal Information Security Modernization (FISMA) Act, security control assessment, authorization decision support, continuous monitoring strategy, vulnerability remediation, and coordinated incident response; AND
• Implementing and maintaining cybersecurity resilience for enterprise systems and technology services to ensure compliance with applicable Federal information security requirements; AND
• Directing agency cybersecurity risk-management activities, including execution of the Risk Management Framework (RMF), authorization processes, security control assessments, continuous monitoring, vulnerability management, and development and tracking of Plans of Action and Milestones (POA&M); AND
• Integrating cybersecurity requirements into enterprise architecture, technology investments, acquisition processes, business workflows, and law-enforcement mission operations.

Your resume must support your responses to the application questionnaire and the qualification requirements. Failure to do so may result in an ineligible rating. See the Required Documents section for important notes about what must be included in your resume.

closing date of this announcement (11/03/2026)