Clarification from the agency

U.S Citizens or U.S. Nationals; No prior federal experience is required.

As an IT Specialist (INFOSEC), you will:
- Lead various teams in ensuring highly technical and complex audits of IT systems and information systems security programs and practices conform to applicable professional standards and FHFA OIG policy. Prepare proposals for future audits of aforementioned systems, programs, and practices. Conduct and/or review pre-audit and evaluation research of any prior audits reports, as well as related laws, regulations, policies, and procedures. Working with the IT Audit Manager and IT Audit Director, develop plans for assigned audits within the established scopes, and lead teams in the development of technical procedures and steps needed to accomplish audit objectives. Assign tasks and provide technical and administrative guidance to team members. Serve as liaison with auditee representatives.

- Conduct and/or participate in briefings with OA and auditee management to discuss issues, status of audits, outcomes of testing, and audit results. Prepare and/or review audit reports and supporting documentation prepared by team members ensuring compliance with applicable professional standards and OIG policy. Monitor implementation of corrective actions recommended in audit reports. Participate in preparing responses to Congressional requests, and in preparing summaries of Congressional hearings.

- Exercise responsibility for leading assigned teams, including assignment of audit tasks based on individual experience and specific knowledge and skills in IT security. Specifically, lead teams in conducting audits IT systems and information systems security programs and practices to determine the degree of management effectiveness, operating efficiency, economy, and security with which auditees' systems are operating; lead vulnerability assessments and penetration tests to identify security vulnerabilities, causes of systems weaknesses, and identify instances of lack of compliance with IT security requirements; and perform analysis of vulnerabilities and risks and make recommendations to improve security measures and countermeasures to mitigate IT security risks: lead audits of disaster recovery exercises to identify weaknesses in continuity of operations and make recommendations for ensuring the safeguarding of information systems and their availability in the event of a disaster.

- Review work products prepared by team members to ensure accuracy and sufficiency of support for identified weaknesses in IT systems security and information systems program and practices, and compliance with applicable professional standards and FHFA OIG policy. Provide on-the-job training on use of electronic audit documentation system and audit tasks such as interviewing, testing, program and system processes observation, and report writing. Provide input to the Supervisory IT Specialist (Audit Manager) on team members' performances and any recommended formal training for team members.

- As a Contracting Officer's Representative (COR) in the event an audit is contracted, perform technical contracting functions, including drafting statements of work (SOWS), preparing cost estimates, and developing technical standards of performance. Participate in procurement technical evaluation panels to evaluate bids.

Conditions of employment

This announcement is issued under the "direct-hire" authority. Consistent with 5 U.S.C. 3304(a)(3) and OPM regulations (5 CFR 337 Subpart B) on direct-hire: All candidates who meet all the qualifications and other eligibility requirements may be referred for consideration. Competitive examining rules providing for rating and ranking and veterans' preference do not apply.

The experience may have been gained in either the public, private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year, and indicate number of hours worked per week on your resume.

Key Requirements:

1. Please refer to "Conditions of Employment."
2. Must be U.S. Citizen or U.S. National

Ethics: FHFA-OIG employees are subject to government-wide ethical standards of conduct, financial disclosure requirements, and post-employment prohibitions. In addition, certain FHFA-OIG employees are prohibited from accepting compensation from Fannie Mae and Freddie Mac for a two-year period after terminating employment with FHFA-OIG. Furthermore, to avoid financial conflicts-of interest or the appearance of conflicts-of-interest, FHFA-OIG employees may need to divest or sell certain assets they, their spouse, or minor children own or control, including securities issued by Fannie Mae, Freddie Mac, or the Federal Home Loan Banks. Employees who work on Federal Home Loan Bank issues may need to sell or divest financial interests with any of the Federal Home Loan Bank members, which may include stock in bank holding companies, insurance companies, and other financial services firms.

Qualifications

You must meet the following requirements by the closing date of this announcement.

Specialized experience: For the EL-13, you must have one year of specialized experience at a level of difficulty and responsibility equivalent to the EL/GS-12 grade level in the Federal service. For this position, specialized experience is defined as: demonstrated experience, and applying, Federal Information Security Modernization Act, Office of Management and Budget (OMB) Circular No. A-130, Appendix III, and National Institute of Standards and Technology (NIST) standards and guidelines when conducting performance audits over information technology/cyber security, in accordance with generally accepted government auditing standards (GAGAS) or equivalent non-federal auditing standards and guidelines.

In addition to specialized experience, individuals must have IT-related experience demonstrating each of the four competencies listed below:
A. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
B. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
C. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
D. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendation.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your application includes your résumé, responses to the online questions, and required supporting documents. Please be sure that your résumé includes detailed information to support your qualifications for this position; failure to provide sufficient evidence in your résumé may result in a "not qualified" determination.

Rating: Your application will be evaluated in the following areas: Technical and Communication.

Referral: All candidates who meet all the qualifications and other eligibility requirements may be referred for consideration. Competitive examining rules providing for rating and ranking and veterans' preference do not apply. You may be required to participate in a selection interview.

If you are a displaced or surplus Federal employee (eligible for the Career Transition Assistance Plan (CTAP)/Interagency Career Transition Assistance Plan (ICTAP)) you must receive a score in the middle category or better to be rated as "well qualified" to receive special selection priority.