Clarification from the agency

U.S. Citizens

The Office of Information Security and Privacy is responsible for carrying out the Chief Information Officer’s responsibilities under the Federal Information Security Modernization Act (FISMA) of May 2014 by advancing and managing the Agency-wide IT security program. This includes development of plans and programs, identification of threats, analysis of risk, development of risk management plans, testing the effectiveness of security controls, reporting to senior management, oversight of information security Agency-wide and management of Agency-wide compliance with relevant Federal legislation and directives.

Specific duties of the Director include:

• Managing the Agency’s compliance with the IT security provisions of FISMA, the Computer Security Act, the Privacy Act, the Clinger-Cohen Act, OMB Circular A-130 and other relevant Federal legislation, directives, standards and guidelines.
• Developing and implementing Agency-wide plans and programs for IT security and privacy.
• Developing and implementing IT security policies, procedures and best practices for threat and risk assessment, planning, risk management, program management, training, evaluation and communication with senior management.
• Serving as a principal Agency focal point for IT security audits and evaluations conducted by the Office of Inspector General, the Government Accountability Office, Congress and other oversight organizations.
• Reporting and mitigating incidents that impair data and infrastructure security.
• Serving as the Agency’s Chief Information Security Officer.

Conditions of employment

• You must be a U.S. citizen.
• You must submit resume and required documents (see How to Apply section).
• If you are selected, a pre-employment background check is required.
• You may be required to travel 1 to 5 days per month.
• Pre-employment drug testing is required and random testing thereafter.

If you are selected, you must complete a 1-year SES probationary period, if not previously completed.

The Ethics in Government Act, P.L. 95-521, requires the applicant selected for this position to submit a financial disclosure statement, OGE-278, prior to assuming the SES position, annually, and upon termination of employment.

This position is designated as High Risk and requires a background investigation. Unless an appropriate background investigation is already on record with the Office of Personnel Management, you must undergo a background investigation.

You will be required to obtain and maintain a top-secret security clearance.

 

 

Qualifications

The work of this position is classified in the Information Technology Management Series, 2210 series which covers positions that manage, supervise, lead, administer, develop, deliver, and support information technology systems and services. Applicants must have substantive general experience which provides a good basic or general knowledge of the principles of organization, management and administration; and substantive specialized (operating administrative or managerial) experience in a type of work or a combination of functions directly related to this position.

All applicants must have one year of specialized experience at a level close to the work of this job that demonstrates the particular knowledge, skills, and abilities required to successfully perform in this role. Typically this experience can be found in work within this field or a field that is closely related. 

As a basic requirement for entry into the Senior Executive Service, applicants must also provide evidence of progressively responsible leadership experience that is indicative of senior level management capability and directly related to the skills and abilities outlined under the Executive Core Qualifications and Technical Qualifications listed below. 

A. Executive Core Qualifications (ECQs) - Mandatory for competitive applicants - Failure to address these factors will result in your application being disqualified, unless you are a noncompetitive eligible applicant. 

ECQ 1 - LEADING CHANGE. Involves the ability to bring about strategic change, both within and outside the organization, to meet organizational goals. Inherent to this ECQ is the ability to establish an organizational vision and to implement it in a continuously changing environment. 
ECQ 2 - LEADING PEOPLE. Involves the ability to lead people toward meeting the organization's vision, mission, and goals. Inherent to this ECQ is the ability to provide an inclusive workplace that fosters the development of others, facilitates cooperation and teamwork, and supports constructive resolution of conflicts. 
ECQ 3 - RESULTS DRIVEN. Involves the ability to meet organizational goals and customer expectations. Inherent to this ECQ is the ability to make decisions that produce high-quality results by applying technical knowledge, analyzing problems, and calculating risks. 
ECQ 4 - BUSINESS ACUMEN. Involves the ability to manage human, financial, and information resources strategically.
ECQ 5 - BUILDING COALITIONS. Involves the ability to build coalitions internally and with other Federal agencies, State and local governments, nonprofit and private sector organizations, foreign governments, or international organizations to achieve common goals.

Your responses should be clear and concise and show a level of accomplishment and a degree of responsibility. Leadership competencies for each ECQ can be found at http://www.opm.gov/policy-data-oversight/senior-executive-service/reference-materials/guidetosesquals_2012.pdf 

B. Technical Qualifications (TQs) - Mandatory for all applicants - Failure to address these factors will result in your application being disqualified.

TQ 1 - Demonstrated experience applying knowledge of laws, regulations, policies, and ethics related to cybersecurity and privacy to lead an IT security program for a large organization.

TQ 2 - Demonstrated experience leading complex or controversial initiatives related to increased system performance, identification of threats, risk analysis, development of risk management plans, and testing the effectiveness of security controls.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

We will review your resume and required documents to ensure you meet the basic qualification requirements. If you meet basic qualification requirements, your application will be evaluated based on your narrative statements addressing the Executive Core Qualifications (ECQs) and Technical Qualifications (TQs). It will then be forwarded to a three member Rating Panel consisting of SES members for further review. The Rating Panel will decide which Best Qualified applicants will be issued to the Selecting Official by the Human Resources Office.