Supervisory IT Specialist (INFOSEC)

Cybersecurity Jobs; San Francisco (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

HHS OIG seeks a Supervisory IT Specialist (INFOSEC) to lead enterprise information security programs and govern risk/privacy across the organization while ensuring federal compliance. The role guides senior leadership and technical staff, coordinating security activities and audits.

Responsibilities include managing the Security Program, implementing risk management, and ensuring adherence to FISMA, NIST frameworks, and OMB policies. Strong leadership and regulatory knowledge are essential.

Qualifications

• 1 year of specialized experience in enterprise information security programs.
• Experience applying federal cybersecurity frameworks (NIST SP 800-53, RMF, NIST CSF).
• Able to obtain and maintain a Top-Secret/SCI clearance.
• Supervisory oversight of multi-disciplinary information security teams.

Responsibilities

• Provide broad policy analysis, consultation, and program management for information security, risk, and privacy.
• Oversee the Security Program across systems, devices, and communications platforms.
• Manage compliance with federal information security and privacy requirements (FISMA, OMB Circular A-130).
• Develop and implement organization-wide IT security plans and risk programs.
• Act as focal point for IT security audits and evaluations, and manage vulnerability mitigation efforts under FISMA.
• Coordinate regular testing of networks and IT resources to ensure security standards.
• Provide guidance to senior leadership and prepare briefings on significant security issues.
• Plan, organize, and direct staff to ensure IT programs meet regulatory requirements.

Skills

Attention to Detail

Customer Service

Decision Making

Information Management

Interpersonal Skills

Oral Communication

Problem Solving

Teamwork

Technical Competency

Tools

NIST SP 800-53

NIST RMF (SP 800-37)

Zero Trust Architecture (SP 800-207)

NIST Cybersecurity Framework

ATO Process

Job description

Supervisory IT Specialist (INFOSEC) will serve as the organization’s senior information security leader, overseeing HHS OIG-wide security, risk, and privacy governance while ensuring federal compliance.

Responsibilities

• Provide broad policy analysis, consultation, advice, and program management for information security, risk, and privacy, promoting sound methods and industry best practices.
• Oversee the organization’s Security Program, including planning, coordinating, and controlling security and privacy activities across all systems, devices, and communications platforms.
• Manage compliance with federal information security and privacy requirements, including FISMA, the Computer Security Act, the Clinger-Cohen Act, and OMB Circular A-130.
• Develop and implement organization-wide IT security plans and programs, including threat and risk assessment, risk management, training, program oversight, and evaluation.
• Act as a focal point for IT security audits and evaluations, and manage the enterprise-wide project plan for vulnerability mitigation required under FISMA.
• Coordinate regular testing of telecommunications networks and IT resources to confirm alignment with established security standards and practices.
• Provide expert guidance to senior leadership, including the HHS CISO, program officials, and technical staff; prepare briefings and recommendations on significant security issues.
• Plan, organize, and direct subordinate staff activities to ensure IT programs comply with legal and regulatory requirements and support operational needs.

Requirements

• U.S. Citizenship is required.
• Registration with the Selective Service (if applicable).
• Suitability for Federal employment determined by background investigation.
• One-year probationary period may be required.
• Confidential financial disclosure report (OGE-450) is required.Must be able to obtain and maintain a Top-Secret/SCI Clearance.
• This role is a Testing Designated Position: drug screening prior to appointment, plus unannounced random drug testing during employment.
• One-year Supervisory Probationary Period may be required.
• GS-2210 basic qualifications require IT-related experience showing the competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork, Technical Competency.
• Applicants must have 1 year of specialized experience equivalent to the next lower grade level in the Federal service.
• Specialized experience must include leading enterprise information security programs and cybersecurity governance in compliance with FISMA, OMB Circular A-130, and other federal information security legislation, directives, and standards.
• Specialized experience must include applying federal cybersecurity frameworks: NIST SP 800-53, NIST Risk Management Framework (SP 800-37), Zero Trust Architecture (SP 800-207), and the NIST Cybersecurity Framework.
• Specialized experience must include overseeing security authorization, risk assessments, continuous monitoring, and authority to operate (ATO) processes for enterprise information systems.
• Specialized experience must include supervisory oversight of multi-disciplinary information security teams (for example: governance/risk/compliance, cloud security, identity & access management, threat detection & response) in a large or complex organization.
• Federal experience is not required.
• Education is not qualifying for this position.

Technologies / Frameworks

• FISMA
• Computer Security Act
• Clinger-Cohen Act
• OMB Circular A-130
• NIST SP 800-53
• NIST Risk Management Framework (SP 800-37)
• Zero Trust Architecture (SP 800-207)
• NIST Cybersecurity Framework
• Authority to operate (ATO)
• OGE-450

How You Will Be Evaluated

• Evaluation will be based on how well you meet the qualifications provided.
• Eligibility and qualifications will be determined based on review of your detailed resume.
• Your resume will be evaluated for evidence demonstrating possession of specialized experience.
• Evaluation will be performed by a subject matter expert to determine whether you meet qualifications; results will support an initial rating.

Required Documents

• Resume (two-page limit)
• Responses to the Assessment Questionnaire
• Veterans’ Preference documentation (if applicable): submit DD Form 214 and, if applicable, Application for 10-Point Veterans Preference and an official document dated 1991 or later
• SF-50, Notification of Personnel Action
• Performance Appraisal
• CTAP/ICTAP/RPL documentation
• SF-50 requirements: must show competitive service appointment (position occupied block 34 should show a “1”), tenure group (block 24 should show a 1 or 2), grade, and salary

Additional Information

• Recruitment incentives: payment for relocation expenses may not be authorized.
• Recruitment incentives: a recruitment bonus may not be offered.
• Recruitment incentives: student loan repayment may not be offered.
• Private sector work experience will not be approved as credit for Annual Leave accrual.
• Background security investigation required for all appointees; appointment depends on successful completion and favorable adjudication.
• Background security reinvestigation or supplemental investigation may be required later.
• False representation may result in non-consideration, non-selection, and/or appropriate disciplinary action.
• E-Verify: documentation for DHS Form I-9 will be verified through the DHS “E-Verify” System.
• Direct Deposit is required for Federal salary payments.
• CTAP/ICTAP documentation: if eligible as a displaced or surplus Federal employee, you MUST submit proof of eligibility.
• CTAP/ICTAP selection priority: eligible candidates must be rated well-qualified at 85.0 or above to exercise selection priority.
• HHS is an equal opportunity employer.
• Disabled Veteran Leave: HHS OIG participates in the Wounded Warrior Federal Leave Act of 2015.

Open To

• The public
• U.S. Citizens, Nationals, or those who owe allegiance to the U.S.

Clarification from the Agency

• All U.S. Citizens; no prior Federal experience is required.

Application Deadline

Applications must be received by 11:59 PM (Eastern Time) on 10/13/2026.

Benefits

• A career with the U.S. government provides a comprehensive benefits package.
• Benefits eligibility depends on the type of position and whether it is full-time, part-time, or intermittent.