Information Systems Security Manager (ISSM)

To be considered qualified for this position you must meet the following qualification requirements for the respective grade level in which you are applying. Applicants must demonstrate that they meet the Basic Requirements AND Minimum Qualification requirements as listed below: BASIC REQUIREMENTS: Possess information technology related experience demonstrating each of the four required competencies A. Attention to Detail: Ensuring IT programs are in compliance with cybersecurity policies and/or standards B.

Customer Service: Interpreting IT security guidelines or policies to meet customer needs C. Oral Communication: Communicating organizational security policies and procedures to stakeholders D. Problem Solving: Providing solutions to cybersecurity issues to meet short and long-term goals.

IN ADDITION TO MEETING THE BASIC REQUIREMENTS ABOVE, YOU MUST ALSO MEET THE FOLLOWING MINIMUM QUALIFICATIONS: You qualify for the GS-14 level (starting salary $143,913.00) if you possess one year of specialized experience equivalent to the GS-13 level performing duties such as: Manage information security within an organization or program by planning strategically, enforcing policies, overseeing personnel and infrastructure, conducting emergency planning, promoting security awareness and allocating resources.

• Execute duties related to hardware, software, and information system acquisitions, ensuring compliance with program management policies.
• Provide direct support for IT-related acquisitions, including National Security Systems, by applying relevant laws, policies, and guidance throughout the acquisition life cycle.
• Conduct assessments of systems and networks to identify and address deviations from standards, ensuring compliance with policies and procedures.

Time-in-Grade Requirements: Under competitive merit promotion procedures, any individual who is currently holding, or who has held within the previous 52 weeks, a General Schedule position under a non-temporary appointment in the competitive or excepted service, must meet "time-in-grade" requirements (have served 52 weeks at the next lower grade of the grade for which you are applying).

Time-In-Grade requirements also apply to current competitive service employees applying for a Veterans Employment Opportunities Act of 1998 (VEOA) appointment. NOTE: All current or former Federal employees must provide a copy of their SF-50, "Notice of Personnel Action" that indicates proof of status and time-in-grade eligibility. The SF-50 must include your position, title, series, grade, step, tenure (1 or 2), and type of service (Competitive or Excepted). You may need to submit more than one SF-50 to comply.

The qualification requirements listed above must be met by the closing date of this announcement. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.

You will receive credit for all qualifying experience, including volunteer experience. Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, Non-career SES or Presidential Appointee employee in the Executive Branch, you must disclose this information to the Human Resources Office.

The selectee will serve as an Information Systems Security Manager (ISSM) in the Office of the Chief Information Officer, Chief Information Security Office. Typical work assignments include: Advising appropriate senior leadership or Authorizing Official of changes affecting the organization's cybersecurity posture.

Assuring successful implementation and functionality of security requirements and appropriate information technology (IT) policies and procedures that are consistent with the organization's mission and goals. Participating in Risk Governance process to provide security risks, mitigations, and input on other technical risk. Advising senior management (e.g., Chief Information Officer [CIO]) on risk levels and security posture.

Managing protective or corrective measures when a cybersecurity incident or vulnerability is discovered.