Cybersecurity Compliance Office Lead (O-6 Billet) Supervisory

PHYSICAL DEMANDS: Sit and/or stand for extended periods of time, generally six to eight hours. Perform repeated bending motions. Use average manual dexterity for computer operation. Use a telephone for extended periods. If the incumbent is a clinician, the incumbent may be required to perform temporary duty assignments in support of field operations for a minimum of two weeks and a maximum of 30 days annually.

DUTIES AND RESPONSIBILITIES: Supervises and leads a team of three Cybersecurity and Privacy Program Managers responsible for cybersecurity and privacy compliance workstreams. Establishes workload distribution, priorities, timelines, documentation standards, and quality expectations for the office. Serves as the accountable CAMS leader for program and portfolio management of cybersecurity and privacy compliance work across the IHSC health information technology portfolio.

Directs management of milestones, schedules, dependencies, action items, risk visibility, and required coordination activities. Ensures cybersecurity and privacy requirements are identified during acquisition planning and reflected in acquisition requirements documentation before an acquisition is referred to the contracting office. Coordinates with the Acquisition Planning Office to ensure compliance requirements are incorporated early in the acquisition lifecycle.

Oversees office support provided in coordination with the ICE Office of the Chief Information Officer for authorization-related activities, including Risk Management Framework documentation, required artifacts, milestones, and coordination with system owners, Authorizing Officials, and information system security officers. Maintains visibility of continuous-monitoring activities across the portfolio, including compliance status, open findings, corrective actions, dependencies, and aging items requiring attention.

• Ensures significant compliance issues are tracked, assigned, elevated, and resolved through the appropriate authorized officials.
• Establishes Government programmatic priorities and requirements for assigned cybersecurity and privacy compliance activities.
• Coordinates contractor performance through the Contracting Officer or an appointed Contracting Officer's Representative, as appropriate, while preserving Government decision-making authority.

Coordinates with privacy officials to ensure potential privacy implications are identified early and formal privacy reviews occur at an appropriate point in the acquisition and system lifecycle. Ensures privacy-related requirements, risks, and actions are documented and routed to officials holding formal authority.

Coordinates with the Portfolio Management Office to ensure cybersecurity and privacy milestones, dependencies, constraints, and risks are accurately reflected in enterprise schedules, planning documents, and portfolio-management activities. Coordinates with the Acquisition Planning Office and Contract Governance Office to ensure cybersecurity and privacy obligations carry through from acquisition planning into contract performance, oversight, and transition activities.

Identifies, assesses, and escalates material security, privacy, and compliance risks. Provides CAMS and HITU leadership with recommendations, readiness assessments, and analysis of likely programmatic, schedule, cost, and mission impacts. Provides unit leadership with portfolio status reports, compliance-posture summaries, risk assessments, and readiness information supporting executive decision-making.

Translates technical cybersecurity and privacy information into clear programmatic impacts and recommended actions for executive leadership, program officials, and acquisition personnel. Develops and implements office operational plans, procedures, documentation standards, recordkeeping practices, and process improvements necessary to achieve CAMS and HITU objectives. Captures institutional knowledge to support continuity through personnel transitions.

Performs supervisory duties, including performance management, work planning, coaching, mentoring, employee development, and accountability for assigned officers. Identifies developmental needs and ensures completion of required position-specific training. Establishes and enforces appropriate information-protection practices. Ensures proper handling of procurement-sensitive, proprietary, security, privacy, and system information. Performs other duties as assigned.