The Cybersecurity and Infrastructure Security Agency (CISA) leads the national effort to understand, manage, and reduce risk to our critical cyber and physical infrastructure. The CISA Chief Information Security Officer (CISO) serves as the executive responsible for enabling this mission by strengthening the cybersecurity posture of CISA, while fostering collaborative networks across federal government and engaging with industry to build a more secure, resilient future. As CISO you will report directly to the CISA Chief Information Officer (CIO) and manage a range of complex cybersecurity work related to establishing and maintaining a comprehensive Agency-wide information security and risk management program. You will be responsible for the Agency's security architecture, security operations center, and responsiveness to incidents that may impact business, mission assets, personnel, and networks across CISA's multi-billion-dollar information technology enterprise. You will apply your technical and executive leadership expertise to:

• Direct cybersecurity leaders and teams within the CISA Office of the Chief Information Security Officer in accordance with CISA's Core Values and Core Principlesto meet operational compliance requirements, steward Agency finances, and effectively manage, reduce, and mitigate increasing cybersecurity risks;
• Assist the CISA CIO and other DHS senior leaders with decision-making and actions related to a variety of information security priorities (e.g., implementing solutions to minimize the risk of cyber-attacks; determining acceptable levels of risk for the Agency; supporting system risk assessments to enable Agency Authority to Operate (ATO) approvals; and advocating for future planning, architectures, and investments);
• Develop and lead CISA's incident response and investigation procedures and processes, including assisting in the development of disaster recovery and business continuity plans and procedures; and oversee the development, implementation, and management of CISA policy, standards, and guidance in accordance with federal laws, regulations, and DHS Directives.

Conditions of employment

• You must be a U.S. Citizen or national.
• You must be 18 years of age.
• Must be registered for the Selective Service (if you are a male).
• Must be able to obtain and maintain a Top Secret/SCI security clearance.
• Must be able to submit to a drug test and receive a negative result.
• Must be able to comply with ethics and standards of conduct requirements, including completing any applicable financial disclosure.
• May be required to serve a 3 year probationary period.

Qualifications

This position is in the Executive Track at the Cybersecurity Executive career level. DHS Cybersecurity Service employees start at career levels and salaries matching their experience and expertise. To learn more about DHS Cybersecurity Service career tracks and levels, visit our application portal.

Cybersecurity Executives generally:

• Have 15+ years of cybersecurity or other technical work experience
• Have 5+ years of leadership experience
• Are capable of serving as Component senior functional authority--or DHS-wide leader--overseeing multiple, highly-visible, multi-level Component, DHS, and/or National cybersecurity programs

• Possess a comprehensive understanding of the national cyber threat landscape, emerging cyber issues and supply chain risks, as well as cybersecurity-centric technologies and solutions.
• Have experience as a thought leader in evolving cyber defense capabilities to rapidly address changes in the threat and technology landscape.
• Have the ability to lead agile organizations and teams of experts to analyze and adapt to evolving cybersecurity challenges.
• Have demonstrated the ability to effectively represent an organization in complex deliberations with senior officials from all branches and levels of government and with private sector executives.
• Are able to handle extremely complex communication and influence policy decision making among technical and non-technical stakeholders to enable DHS cybersecurity programs.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

You will be evaluated for this job based on how well you meet the qualifications above.

All DHS Cybersecurity Service applicants participate in a multi-phase assessment process, which varies by career track. For the Executive Career Track, applicants participate in a two-phase assessment process:

• You must successfully complete Phase I to be invited to advance to Phase II.
• The total time commitment for both phases is approximately 4 hours (many applicants require less time!).
• Before each phase, DHS will e-mail you instructions and information to help you prepare.
• Monitor your e-mail to ensure you have plenty of time to complete assessments prior to any deadlines or request an extension, if necessary.

• Unproctored - you choose the time and location
• Includes two assessments: (1) an executive work simulation that you will have up to2.5 hours to complete; and (2) an executive situational judgement test that you will have up to 1 hour to complete.
• The two assessments take about 3 hours (on average) to complete.
• No knowledge of DHS is required for these assessments.
• Requires a computer with audio (speakers or headphones) and a reliable internet connection.

• Online video or in-person interview - you coordinate with DHS to schedule
• 1 hour to complete
• Discuss your cybersecurity career journey, including the cybersecurity specializations (called technical capabilities in the DHS Cybersecurity Service; visit here to learn more about the technical capabilities) in which you have the most expertise and experience.
• Provide your responses to interview questions, including work-related scenarios to assess your capability to lead technical cybersecurity talent and cybersecurity-focused organizations.