Chief Information Security Officer

Qualifications include both general management skills and characteristics that are applicable to all Senior Level positions and technical or program responsibilities specific to this position.

Applicants must have substantive general experience which provides a good basic or general knowledge of the principles of organization, management, and administration; and substantive specialized (operating administrative or managerial) experience in a type of work or a combination of functions directly related to this position. Applicants must meet the qualification requirements by the closing date of this announcement.

Eligibility for this position will be based upon a clear showing that the applicant has experience of the scope and quality sufficient to effectively carry out assignments of the position. Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

Candidates will not be hired based on their race, sex, color, religion, or national origin.To meet the minimum qualification requirements for this position, you must show that you possess the Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit will be disqualified. Please see "Required Documents" section below for all resume formatting requirements.

Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position.

TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications: MTQ 1: Demonstrated experience with risk management principles and methodologies, including the ability to identify, assess, and prioritize risks for Super Intelligence (SI), legacy systems, emerging technologies, complex datasets, and cloud solutions as well as a thorough understanding of federal compliance requirements (e.g.

FISMA, NIST), ensuing compliance with these requirements, and securing complex data in various environments. MTQ 2: Expertly expresses complex information (e.g. ideas or facts) on cybersecurity, risk, compliance, secure SI implementation, and/or data-related concepts considering the audience and nature of the information.

Demonstrated skill in presenting cybersecurity topics to an executive audience in order to promote a culture of security awareness, effectively report on compliance with requirements, and utilizes data to drive metrics-based decisions. MTQ 3: Demonstrates an ability to drive technical innovation in a secure, compliant, and data-driven manner to support the overall goal of modernizing DEA's IT enterprise.

Experience securely integrating new technologies, processes, complex data sets, SI and cloud solutions into an organization while efficiently assessing risk, compliance, and data security. Possesses a comprehensive understanding of IT security concepts, theories, practices, and standards. Serves as a foremost authority in security architectural planning and provides senior level guidance to agency leadership.

As a Chief Information Security Officer, your typical work assignments may include: Direct the design, formulation, and establishment of policies, procedures, standards, and systems regarding IT security, cybersecurity, and access to IT systems. Plans, directs, schedules, and supervises work performed and within the agency concerning the preparation and formulation of DEA-wide policy in the form of policies and procedures, which affect all areas of IT security, cybersecurity, and access to IT systems.

Reviews and refines such policies and procedures to ensure compliance with existing authorities and applicability to the DEA environment. Serves as the source of authoritative information and assistance to DEA managers by advising on IT security, cybersecurity, and access to IT systems on issues and impact of information security programs to organizational missions. Advises managers regarding changes in relevant EOs, DOJ Orders, NSA policies and regulations, and other applicable laws, directives, and regulations.

Recommends changes to the IT security posture/programs in response to changes in technology, vulnerabilities, and threats. Finalizes DEA responses to requests from DOJ, Office of Management and Budget (OMB), General Accounting Office, the White House, and Congressional committees for INFOSEC programs to comply with applicable laws and regulations.

Provides leadership to information security professionals to develop and implement an Information Security Program that substantially includes an integrated framework of Information Security Governance and Information Risk Management program for DEA.