It Specialist (Infosec)

To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 10/29/2026.

Applicants must have IT-related experience demonstrating each of the four competencies listed below at a proficiency level equivalent to the next lower grade level in federal service You must meet both the Basic Requirement and the Specialized Experience and the Selective Placement Factor to qualify for this series as described below Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade GS-13 in the normal line of progression for the occupation in the organization.

Experience with PII/PHI/PCI data security standards as applied to systems risk assessments; Experience with embedded systems security considerations in system design reviews; briefing executive/senior leadership on cybersecurity risk posture or trend reporting; applying NIST Risk Management Framework (RMF) steps (Categorize through Monitor) to an enterprise system; and using GRC or security posture reporting tools, ServiceNow CAM to track system authorization status.

AND Selective Placement Factor: Skill in conducting comprehensive assessments of technical, operational, and management security controls in accordance with the NIST Risk Management Framework (RMF) to determine overall system security posture and ensure compliance with federal cybersecurity requirements.

Skill in planning and executing security authorization activities, including reviewing accreditation packages, validating implemented security controls, documenting deviations, and recommending corrective actions to maintain acceptable organizational risk levels.

Skill in preparing and contributing to RMF documentation, including system security plans, risk assessments, POA&Ms, and life cycle support plans, to accurately reflect security requirements, system impacts, and mitigation strategies across all phases of system development and operations.

Skill in coordinating the integration and implementation of security controls across platforms and teams, including assessing access controls based on least privilege, supporting incident resolution, verifying minimum security requirements, and advising stakeholders to maintain continuous compliance and security readiness. Physical Demands: The work performed is primarily sedentary in nature.

Some work may require walking and standing in conjunction with travel and to attendance at meetings and conferences away from the work site. May carry light items such as papers, books, or small parts, or drive a motor vehicle. The work does not require any special physical effort. Work Environment: The work is performed in a well-lighted and climate-controlled office environment that involves everyday risks or discomforts that require normal safety precautions.

Employee may occasionally be exposed to uncomfortable conditions in such places as research and productions facilities. This position requires occasional travel using both air and ground transportation. For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/.

Major Duties: Provide advice and technical support to the Supervisor, Data Center Support Division on security related issues. Facilitate and coordinate the gathering, analysis and preservation of evidence used in addressing security violations. Ensure sound security principles are reflected in all tasks to be accomplished (independently undertaken and group/team projects).

Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program. Responsible for the cybersecurity of a program, organization, system, or enclave.

This position is primarily aligned to the following NICE Cybersecurity Workforce Framework work roles: CSC: 804 - IT Investment/Portfolio Manager For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.cisa.gov/tools/cyber-career-pathways-tool Work Schedule: Monday - Friday, 8:00am to 4:30pm Compressed/Flexible: Compressed/flexible schedule available at the manager's discretion Telework: This position may be authorized for telework.

Virtual: This is not a virtual position. Position Description/PD#: It Specialist (Infosec)/09173-A Relocation/Recruitment Incentives: Not Authorized Permanent Change of Station (PCS): Not Authorized PCS Appraised Value Offer (AVO): Not Authorized