Skip to main content
U.S. flag
Back to results

Chief Information Security Officer

Department of Health and Human Services
Office of the Secretary of Health and Human Services
This job announcement has closed

Summary

This position is within the Office of the Chief Information Officer (OCIO). The HHS Chief Information Officer is the executive director of the OCIO which is in the Assistant Secretary for Administration (ASA) organization at HHS. This position will manage the Department's Information Technology (IT) Security Program as the HHS Chief Information Security Officer (CISO) and Director, Office of Information Technology Security (OITS).

Overview

Help
Hiring complete
Open & closing dates
01/28/2022 to 02/18/2022
Salary
$135,468 to - $203,700 per year
Pay scale & grade
ES 00
Location
1 vacancy in the following location:
Washington, DC
Telework eligible
Yes—as determined by the agency policy.
Travel Required
Occasional travel - You may be expected to travel for this position.
Relocation expenses reimbursed
No
Appointment type
Permanent
Work schedule
Full-time
Service
Senior Executive
Promotion potential
00
Supervisory status
Yes
Security clearance
Other
Drug test
No
Position sensitivity and risk
Special-Sensitive (SS)/High Risk
Trust determination process
Announcement number
HHS-ASA-ES-22-11368452
Control number
633941900

Duties

Help

ABOUT THE POSITION
The incumbent will perform and be responsible for all activities for which the HHS IT Security Program is accountable. The incumbent is responsible for executing leadership in developing, planning, coordinating, administering, managing, staffing and supervising the Office of the Chief Information Security Officer (CISO) operations related to the Department-wide IT security program.

Serve as the Department's security strategist in the continued reassessment of the environment to ensure that controls are sufficient. Frequently works on unprecedented problems, issues, and innovative technologies and concerns regarding IT security. Researches IT security trends and will use this information to forecast additional IT security needs and requirements for the Department. Confer
with other key government and private sector officials and top experts representing the Department. Participate on Departmental and interagency IT security committees and councils as a recognized expert and authority.

Applies a wide range of qualitative and/or quantitative methods to assess and improve program effectiveness and/or complex management processes, projects, and systems. Issues studied impact the entire region, headquarters, and often times the nation, in the incumbent's analysis of and implementation of innovations in business matters, ensuring that HHS continues to develop and employ best
industry practices. Uses technical leadership, outstanding creativity, and exceptional judgment to develop, define, and modify research and/or programmatic objectives, devising innovative ways to solve problems of major importance to the Department.

Lead the effort to maximize the value and effectiveness of security performance measures associated with FISMA reporting, risk assessments, security authorizations, and the implementation of automated security continuous monitoring of HHS systems and data, while remediating and mitigating IT systems' threats and vulnerabilities.

Responsible for implementing and managing the overall HHS IT security program, which oversees the security of the Department's IT resources geographically dispersed across the United States.

Assures that each information system and associated facility provides a level of security that is commensurate with the risk and magnitude of the harm that could result from the loss, misuse, disclosure or modification of the information contained in the system.

Requirements

Help

Conditions of employment

  • This employer participates in the E-Verify Program
  • U.S. Citizenship is required
  • Subject to satisfactory security and suitability determinations
  • New appointees must successfully complete a 1-year probationary period
  • Must pass a pre-employment drug test; random testing after appointment
  • This is a career position in the SES. Unless the selectee is already a member of the SES with career status or has successfully completed an SES Candidate Development Program certified by OPM.
  • Executive qualifications must be approved by OPM before appointment can be effected. If you are selected, you will be responsible for working with an HHS Executive Consultant, or QRB Writer to develop an ECQ narrative for submission to OPM
  • You must meet the qualification requirements of this position no later than the closing date of the job opportunity announcement.

Qualifications

Open to all groups of qualified individuals from the public. Current employees within the Federal civil service. Career SES and SES reinstatement eligibles. SESCDP graduates may also apply for noncompetitive consideration.

As a basic requirement, applicants must demonstrate progressively responsible leadership experience that is indicative of senior executive level managerial capability and directly related to the skills and abilities outlined under the Mandatory/Technical Qualifications and Executive Core Qualifications listed below. Typically, experience of this nature will have been gained at or above the equivalent of the GS-15 grade level in the Federal service or its equivalent with state and local government, the private sector, or non-governmental organizations. Failure to meet this basic qualification requirement and all executive and technical qualification factors will automatically exclude you from further consideration.


All competitive candidates for SES positions with the Federal Government must demonstrate leadership experience indicative of senior executive level management capability. To meet the minimum qualification requirements for this position, you must show in your resume that you possess the Fundamental Competencies, five Executive Core Qualifications (ECQs), and the Mandatory Technical Qualifications (MTQ's), listed below. It is recommended that your resume emphasize levels of responsibility, scope and complexity of programs managed, and program accomplishments and results.

Fundamental Competencies:

Interpersonal Skills, Oral Communication, Integrity/Honesty, Written Communication, Continual Learning, and Public Service Motivation.

Executive Core Qualifications (ECQs):

1. Leading Change: The ability to bring about strategic change, both within and outside the organization, to meet organizational goals. Inherent to this ECQ is the ability to establish an organizational vision and to implement it in a continuously changing environment.

2. Leading People: The ability to lead people toward meeting the organization's vision, mission, and goals. Inherent to this ECQ is the ability to provide an inclusive workplace that fosters the development of others, facilitates cooperation and teamwork, and supports constructive resolution of conflicts.

3. Results Driven: The ability to meet organizational goals and customer expectations. Inherent to this ECQ is the ability to make decisions that produce high-quality results by applying technical knowledge, analyzing problems, and calculating risks.

4. Business Acumen: The ability to manage human, financial, and information resources strategically.

5. Building Coalitions: The ability to build coalitions internally and with other Federal agencies, State and local governments, nonprofit and private sector organizations, foreign governments, or international organizations to achieve common goals.

Mandatory Technical Qualifications (MTQ's):

This position also requires that you possess MTQ's that represent knowledge, skills, and abilities essential for success in this role. The following MTQ's must be evident in your resume.

  1. Demonstrated superior management abilities involving IT security programs in the following areas (i.e security policy, procedural guides, database, and web application security scanning, security evaluations and compliance reviews, security advisory handling, etc.)
  2. Demonstrated executive ability to manage, plan, and implement IT security policies, standards, and regulations.
  3. Demonstrated Knowledge of The Federal Information Security Management Act of 2002 (FISMA).
It is STRONGLY recommended that you visit the following Office of Personnel Management (OPM) webpage for more information regarding the Fundamental Competencies and ECQs.

https://www.opm.gov/policy-data-oversight/senior-executive-service/executive-core-qualifications/#url=Overview

IF SELECTED, you will be required to complete an ECQ package by drafting narratives for each of the ECQs and be certified by an OPM Qualifications Review Board (QRB) in order to be placed in this position. If you are currently serving in a career SES appointment, are eligible for reinstatement into the SES, or have successfully completed an SES Candidate Development Program approved by the Office of Personnel Management (OPM), you WILL NOT need to draft the ECQs.

Education

There is no positive education requirement for this position.

Additional information

Expanded/Maximum telework Posture:-Due to COVID-19, the agency is currently in a maximum telework posture. If selected, you may be expected to telework upon your appointment. As employees are permitted to return to the office, you may be required to report to the duty station listed on this announcement, even if your home/temporary telework site is located outside the local commuting area. Your position may be eligible for workplace flexibilities which may include remote work or telework options, and/or flexible work scheduling. These flexibilities may be requested in accordance with the HHS Workplace Flexibilities policy.

Salary for Senior Executive Service positions varies depending on qualifications. The annual salary range may be found at the top of this announcement. This position may be eligible for performance bonuses and performance based pay adjustments.

Probationary Period:

An individual's initial SES career appointment becomes final only after the individual successfully completes a one year probationary period.

Standards of Conduct/Financial Disclosure

HHS inspires public confidence by maintaining high ethical principles, and all Federal Government employees are subject to the conflict of interest statutes and regulations, including the Standards of Ethical Conduct, that govern activities with outside organizations and reporting financial holdings. The Ethics in Government Act, PL 95-521 also requires the applicant selected for this position to submit a Public Financial Disclosure Report, OGE-278, prior to assuming the SES position, annually, and upon termination of employment.

Security and Background Requirements

If not previously completed, a background security investigation will be required for all appointees.

Equal Opportunity Employment

Equality is held as one of the most important values at HHS. Selection for this, and any other position, will be based solely on merit. HHS does not discriminate based on race, color, religion, sex, national origin, political affiliation, marital status, sexual orientation, physical or mental disability, age or membership or non-membership in an employee organization, or any other non-merit factors.

If applying online poses a hardship to you, you may submit your application by contacting BreAnna Stewart .

Reasonable Accommodation Policy Statement

Federal agencies must provide reasonable accommodation to applicants with disabilities where appropriate. Applicants requiring reasonable accommodation for any part of the application and hiring process should contact: BreAnna Stewart. Requests for reasonable accommodation will be made on a case-by-case basis.

Veteran's Preference

Veteran's Preference does not apply to the SES.

Selective Service

As a condition of employment, all male applicants born after December 31, 1959, must have registered for the selective service. If selected for this position, the applicant must sign a statement certifying his registration, or the applicant must demonstrate exempt status under the Selective Service Law.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your cover letter (NOT TO EXCEED ONE PAGE) and your resume (NOT TO EXCEED FIVE PAGES), demonstrating possession of the technical qualifications and achievement of the five executive core qualifications are the documents that will be used to determine your basic and specialized qualifications for the position. YOU MUST ADHERE TO THE PAGE LIMITS ABOVE AND INCLUDE BOTH DOCUMENTS OR YOU WILL NOT BE CONSIDERED.

Your session is about to expire!

Your USAJOBS session will expire due to inactivity in 8 minutes. Any unsaved data will be lost if you allow the session to expire. Click the button below to continue your session.