The Deputy Chief Information Officer (DCIO), Information Security, is responsible for ensuring Department-wide compliance with security and Enterprise Cybersecurity Strategy Team (ECST) policies and standards through compliance management processes. The responsibilities include, but not limited to:

A) Directing all information protection and ECST programs in the Department.

B) Directing the VA Data Security Management and Identity Management programs, identifies protection goals, objectives and metrics consistent with the VA strategic plan.

C) Sets the direction and strategy for the development and implementation of global security and ECST policies, standards, guidelines and procedures to ensure ongoing maintenance of security and ECST in accordance with Federal laws and policies.

D) Coordinates with appropriate VA Operations, Security and Preparedness staff principals on matters related to security and ECST.

E) Appropriate and timely coordination with the VA Office of the Inspector General (OIG) to ensure timely notification of cyber security incidents and facilitation of investigation and oversight responsibilities by VA OIG.

F) Defines information protection activities, including network and infrastructure security architecture, network and infrastructure access and monitoring process and policies and ensures compliance.

Conditions of employment

• US citizenship is required.
• One year probationary period required for initial SES appointment.
• Males born after 12-31-59 must be registered for Selective Service.
• Successful completion of a background investigation & drug screening.
• Public Financial Disclosure Report (SF-278) is required.
• May be subject to reassignment geographically or organizationally.

Qualifications

To meet the minimum qualifications, applicant must possess the following technical and executive core qualifications.  These qualifications would typically be gained through progressively responsible management or executive level assignments such as director of a regional office, or program manager.  An individual's total experience, education and volunteer work experience must demonstrate the ability to perform the duties of the position. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g. Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social).  Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.  You will receive credit for all qualifying experience, including volunteer experience. 

Mandatory Executive Core Qualifications (ECQs): All applicants must submit a written narrative in response to the following ECQs.  Each ECQ should contain at least two examples describing your experiences and accomplishments/results.  For additional guidance, applicants may visit the Office of Personnel Management's Guide to Senior Executive Qualifications.  Applicants are encouraged to follow the Challenge, Context, Action and Results (C-C-A-R) model outlined in the guide.  Responses to ECQs must not exceed 10 pages.  It is recommended that applicants prepare the ECQs in a Word document and upload it into the application system.
The definitions of the SES ECQs and their underlying competencies can be found at: http://www.opm.gov/ses/recruitment/ecq.asp.  Leading Change:  This core qualification involves the ability to bring about strategic change, both within and outside the organization, to meet organization goals.  Inherent 
to the ECQ is the ability to establish an organization vision and to implement it in a continuously changing environment.  Leading People:  This core qualification involves the ability to lead people toward meeting the organization’s vision, mission, and goals.  Inherent to this ECQ is the ability to provide an inclusive workplace that fosters the development of others, facilities cooperation and teamwork, and supports constructive resolution of conflicts.  Results Driven:  This core qualification involves the ability to meet organizational goals and customer expectations.  Inherent to this ECQ is the ability to make decisions that  produce high-quality results by applying technical knowledge, analyzing problems, and calculating risks.  Business Acumen:  This core qualification involves the ability to manage human, financial, and information resources strategically.  Building Coalitions:  This core qualification involves the ability to build coalition internally and with other Federal agencies, State and local governments, nonprofit and private sector organizations, foreign governments, or international organizations to achieve common goals.

Mandatory Technical Qualifications (TQs):  All applicants must submit a written narrative response to the following TQ.  Please give examples and explain how often you used your skills, the complexity of the knowledge possessed, the level of people you interacted with, the sensitivity of the issues you handled, etc. Responses to the TQ must not exceed 2 pages per each.

TQ1.  Experience planning, designing, developing, deploying and managing security, incident response, and IT business continuity programs for health care delivery organizations and/or benefits delivery organization (e.g. Banking/Insurance).

TQ2.  Experience analyzing, evaluating, developing, deploying and managing IT privacy, security and risk response programs.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Step 1: Minimum ECQ-based qualifications
Step 2: Technical qualification screening
Step 3: VA Executive Resources Board (ERB) rating and ranking
Step 4: Tentative selection by Nominating Organization (May include additional screening)
Step 5: Approval by the Selecting Official (May include additional screening)
Step 6: OPM Qualifications Review Board (QRB) Certification