Supervisory IT Cybersecurity Specialist (Direct Hire)

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 110,000 - 155,000; Full time

Benefits offered by this job

Comprehensive federal benefits

Job summary

Cybersecurity Jobs is seeking a federal IT Specialist to support the CFTC's cybersecurity compliance and operational readiness as the agency’s CISO.

Responsibilities include leading strategic planning, conducting A&A processes, preparing ATO packages, and coordinating incident response. Applicants should demonstrate leadership, strong communication, and rigorous information management in a federal setting.

Qualifications

• U.S. Citizenship required.
• Background/Security Investigation required.
• Demonstrated Leadership and Developing Others.
• Attention to Detail and Customer Service mindset.
• Strong Decision Making, Information Management and Communication skills.

Responsibilities

• Manage cybersecurity program strategic planning and roadmap; conduct reviews and testing per CIO direction.
• Plan and oversee formal assessments; mitigate risk via A&A processes.
• Oversee preparation of Authority to Operate (ATO) packages for signature.
• Ensure CISO programs align with priorities and are communicated across the Commission.
• Conduct and support security assessments, tabletop exercises, and playbook development.
• Produce the cybersecurity program annual budget report to Congress.
• Maintain IT cybersecurity program in compliance with Federal laws and regulations.
• Lead incident response and crisis management communications.
• Apply mitigation, preparedness and recovery strategies to improve security posture.
• Run crisis management exercises and coordinate with external organizations.

Skills

Leadership

Developing Others

Attention to Detail

Customer Service

Decision Making

Information Management

Interpersonal Skills

Oral/Written Communication

Problem Solving

Reasoning

Teamwork

Technical Competence

Tools

NIST SP 800-37

A&A

ATO

Job description

This Direct Hire role supports the CFTC’s cybersecurity compliance and operational readiness as the agency’s CISO.

Responsibilities

• Manage the cybersecurity program strategic planning and roadmap, including strategic and contingency plans for cyber incidents across likely scales and types; conduct reviews and update testing per CIO direction.
• Plan and oversee formal assessments of information systems; mitigate risk by managing the Assessment and Authorization (A&A) process to ensure existing and new IT systems meet cybersecurity and risk requirements.
• Oversee preparation of Authority to Operate (ATO) packages for the Authorizing Official’s signature.
• Ensure CISO programs and initiatives are aligned with commission priorities and communicated across the Commission by evaluating the adequacy of IT security controls and systems.
• Conduct and support internal and external security assessments, tabletop exercises, penetration tests, and playbook development to validate the effectiveness of the CFTC IT Cybersecurity Program.
• Produce the cybersecurity program annual budget report to Congress, highlighting progress toward mission goals and protection of agency information and IT systems.
• Establish and maintain a comprehensive IT cybersecurity program in compliance with Federal laws and regulations by implementing and managing IT policies, guidelines, standards, processes, and management controls.
• Lead incident response by executing established crisis management plans and communicating laterally and vertically as required.
• Apply mitigation, preparedness, and response and recovery approaches to optimize the Commission’s information security posture.
• Run regular crisis management exercises to validate agency response plans.
• Coordinate with external organizations to identify opportunities to share best practices, strategies, resources, and capabilities supporting an innovative and effective program for a Federal financial regulatory agency.
• Conduct independent comprehensive assessments of management, operational, and technical security controls and enhancements within or inherited by an IT system to determine overall control effectiveness (as defined in NIST SP 800-37).

Requirements

• U.S. Citizenship.
• For males born after 12-31-1959: must be registered for Selective Service.
• Background/Security Investigation is required.
• May be required to serve a supervisory probationary period.
• May be required to file a Financial Disclosure.
• Demonstrated Leadership (influences, motivates, challenges others; adapts leadership styles to situations).
• Developing Others (ongoing feedback; opportunities to learn through formal and informal methods).
• Attention to Detail.
• Customer Service (assess needs, provide information or assistance, resolve problems, satisfy expectations).
• Decision Making (sound, well-informed, objective decisions; commits to action to accomplish goals).
• Information Management (gather, organize, and maintain information or information systems).
• Interpersonal Skills.
• Oral/Written Communication (oral communication requirements specified; written not otherwise described).
• Problem Solving.
• Reasoning.
• Teamwork.
• Technical Competence.

Technology

• NIST SP 800-37
• Assessment and Authorization (A&A)
• Authority to Operate (ATO)

Benefits

• A career with the U.S. government provides employees with a comprehensive benefits package.
• Review benefits (eligibility depends on position type and whether the role is full-time, part-time, or intermittent).

Application & Eligibility Notes

• Open to U.S. Citizens, Nationals, or those who owe allegiance to the U.S.
• Filled under the OPM Government-wide Direct Hire Authority for IT Specialist positions.
• Applicants meeting qualification requirements will be forwarded to the selecting official.
• Category Rating, Veterans Preference, Schedule A, and traditional rating and ranking do not apply to this vacancy.

Required Documents

• Cover letter sharing skills and goals relevant to the application.
• Performance appraisal as proof of federal employment.
• Resume including relevant work experience, applicable education, and contact information; for current or previous federal employees, include pay plan, series, and grade.
• SF-50 showing federal position held, grade level, and duty location.
• Transcripts (may support qualifications; high school, college, or other schools).