Clarification from the agency

Current federal employees in the competitive and excepted service, current SES , SES reinstatement eligibles, and SES Candidate Development Program (SESCDP) graduates may apply for this vacancy announcement.

As Chief Information Security Officer, you will:

• serve as a senior advisor and program administrator to the CDC Chief Information Officer and Deputy;
• develop, implement, and monitor a strategic, comprehensive cybersecurity program with organizational units;
• implement and maintain CDC's cybersecurity program to ensure that information assets and associated technology, applications, systems, infrastructure, and processes are adequately protected in the digital ecosystem;
• lead the development, planning, and coordination of the information security and privacy operations related to cybersecurity and privacy programs;
• facilitate information security risk assessment and risk management processes with organizational units;
• identify and evaluate the legal and regulatory requirements for information technology and cybersecurity risk to information assets while supporting and advancing the mission and business objectives;
• implement practices that meet policies and standards for information security and privacy with business units and partners;
• facilitate an information security governance structure through the implementation and oversight of an appropriate governance program;
• develop and enhance an up-to-date information security management framework using standards and policies;
• manage and contain information security incidents and events to protect corporate information technology (IT) assets, intellectual property, and regulated data;
• represent and serve as spokesperson for the Chief Information Officer and Deputy in establishing and maintaining relationships and partnerships with constituents including HHS, congressional officials, other federal agencies, and representatives of business and industry.
• lead, manage and provide oversight of the Cybersecurity Program Office strategy, operations, budget, personnel, and activities and work collaboratively with the agency's Centers, Institutes and Offices to ensure enterprise protections;
• provide supervision and direction to employees and staff.

Conditions of employment

• Direct Deposit: All federal employees are required to have salary payments made by direct deposit to a financial institution of their choosing.
• All qualification requirements must be met by the closing date of the announcement.
• Drug screening required: Yes.
• Moving expenses may be authorized: Yes.
• You must serve a one-year probationary period unless you previously completed one year in the Senior Executive Service.
• This position requires completion of a public financial disclosure report.
• Background and/or Security investigation, if selected for position.
• U.S. citizenship is required.
• Resume, no more than five (5) numbered pages, recommended.
• Remote work may be authorized based on the agency's remote/telework/virtual work policy.
• If applicable, the duty location will be negotiable after selection. You will be required to sign a Statement of Understanding (SOU) for negotiable location requirements.
• Recruitment and Relocation incentives may be authorized.
• Student loan repayment incentive may be authorized.

Qualifications

All competitive candidates for SES positions with the federal government must demonstrate leadership experience indicative of senior executive level management capability. This executive experience includes serving in a managerial capacity to a large and diverse organization with responsibility for promoting economy, efficiency, and effectiveness in the administration of programs and operations. To meet the qualification requirements for this position, you must show in your resume that you possess the six Fundamental Competencies, the five Executive Core Qualifications (ECQs), and the Professional/Technical Qualifications (PTQs) listed below. Your resume should emphasize levels of responsibility, scope, and complexity of programs managed, program accomplishments, and results.

SPECIALIZED EXPERIENCE REQUIREMENT
You must have one year of specialized experience directly related to the position that has equipped you with the particular knowledge, skills, and abilities to successfully perform the duties of the position to include senior-level managerial and leadership experience in coordinating the functions of subordinate managers and specialized staff, and a large, complex budget with implementing and maintaining a large comprehensive cybersecurity information technology program for critical infrastructure protection, risk management, governance, security management framework, and data privacy.

FUNDAMENTAL COMPETENCIES
Interpersonal Skills, Oral Communication, Integrity/Honesty, Written Communication, Continual Learning, and Public Service Motivation.

EXECUTIVE CORE QUALIFICATIONS (ECQs)
1. Leading Change: The ability to bring about strategic change, both within and outside the organization, to meet organizational goals. Inherent to this ECQ is the ability to establish an organizational vision and to implement it in a continuously changing environment.

2. Leading People: The ability to lead people toward meeting the organization's vision, mission, and goals. Inherent to this ECQ is the ability to provide an inclusive workplace that fosters the development of others, facilitates cooperation and teamwork, and supports constructive resolution of conflicts.

3. Results Driven: The ability to meet organizational goals and customer expectations. Inherent to this ECQ is the ability to make decisions that produce high-quality results by applying technical knowledge, analyzing problems, and calculating risks.

4. Business Acumen: The ability to manage human, financial, and information resources strategically.

5. Building Coalitions: The ability to build coalitions internally and with other federal agencies, state and local governments, nonprofit and private sector organizations, foreign governments, or international organizations to achieve common goals.

PROFESSIONAL/TECHNICAL QUALIFICATIONS (PTQs)
This position also requires that you have PTQs that represent knowledge, skills, and abilities essential for success in this role. The following PTQs must be evident in your resume.

1. Senior-level leadership and management experience with leading a comprehensive cybersecurity program and risk management activities.

2. Knowledge of legal and regulatory authorities associated with the oversight and management for information technology (IT) and cybersecurity risk.

3. Senior-level experience facilitating a cybersecurity governance structure through the implementation and oversight of an appropriate governance program.

4. Senior-level experience implementing and monitoring cybersecurity management frameworks and privacy program for an organizational network.

5. Ability to build and maintain effective working relationships and partnerships with individuals and organizations to convey information to support and defend the organization's cybersecurity program to senior-level officials, Congress, federal, state, and non-federal agencies.

It is strongly recommended that you visit the following Office of Personnel Management (OPM) webpage for more information regarding the Fundamental Competencies and ECQs. https://www.opm.gov/policy-data-oversight/senior-executive-service/executive-core-qualifications/#url=Overview

You can find additional information on the proper preparation of ECQs on OPM's website at http://www.opm.gov/ses/references/GuidetoSESQuals_2012.pdf. You are encouraged to follow the Challenge, Context, Action, and Result model outlined in the guide.

If selected, you will be required to complete an ECQ package by drafting narratives for each of the ECQs to be certified by an OPM Qualifications Review Board (QRB) prior to being appointed to the position. If you are currently serving in a career SES appointment, eligible for reinstatement into the SES, or successfully completed an SES Candidate Development Program approved by the Office of Personnel Management (OPM), you will not need to draft ECQs.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your resume with no more than five (5) numbered pages is recommended.

A multi-step process is used to evaluate and refer applicants:

1. Minimum requirements: Your application must show that you meet all requirements including the education and/or experience required for this position. You may be rated "not qualified" if you do not possess the qualification requirements for the position. If your application is incomplete, you may be found "ineligible".

2. Rating: A panel of subject matter experts will review your application and evaluate your qualifications for this position based on the information in your application. Your application will be rated, based on the extent and quality of your experience, education, and training relevant to the duties of this position. Interviews will be at the discretion of the panel and/or selecting official.

3. Referral: If you are among the top qualified candidates, your application will be referred to a selecting official for consideration and possible interview.

Your supporting documents are an integral part of the process for determining your qualifications for the position. If your responses are not supported by your resume, you will be eliminated from consideration. After reviewing your resume and supporting documentation, if a determination is made that you have inflated your qualifications or experience, you may lose consideration for this position. Incomplete or late applications will not receive further consideration.

The application process to recruit for this position is the RESUME BASED method. Separate written narratives addressing the ECQs and PTQs will not be considered at this time. Evidence of your qualifications for the ECQs and PTQs must be clearly demonstrated in your resume, no more than five (5) pages are recommended.