Incumbent serves as the Chief Information Security Officer (CISO) for the National Indian Gaming Commission (NIGC) and leads the Cybersecurity program within the Division of Technology (DoT) under the Office of the Chief of Staff. The DoT provides the agency with Information Technology (IT) services across eight regional offices and conducts IT and Criminal Justice Information Services (CJIS) audits, vulnerability assessment services, and technical operations and assistance to external and internal stakeholders. The Division also processes Freedom of Information Act (FOIA) requests and is responsible for Privacy Act and Records Management compliance for the agency. This CISO develops and implements cybersecurity strategies and policies for the agency.

Major duties include but are not limited to the following:

1. The CISO provides leadership and guidance for the Division of Technology in all information security matters to include managing and maintaining awareness of current IT threats and vulnerabilities impacting agency users and staff. Develops, through consultation with the agency leadership, the strategic direction on cybersecurity policy and guidance for all information processing standards and communication systems for the agency.
2. Implements and maintains the NIGC cybersecurity program involving the full range of policy development, information security training, and security enforcement and monitoring of NIGC information technology systems. Supports the enterprise vision and strategy to ensure information assets are identified and systems are adequately protected.
3. Oversees the design, deployment, and maintenance of security controls implemented in IT systems essential for supporting the NIGC mission and statutory requirements of the Indian Gaming Regulatory Act and NIGC Regulations. Provides expert analysis, advice, and recommendations to NIGC leadership on securing tribal gaming technology. Assists in the development of information technology regulatory control standards for the Indian gaming industry as it relates to information security and cybersecurity.
4. Develops guidelines for implementing broad agency-wide directives and makes decisions or recommendations that significantly influence important agency IT policies. Aligns agency internal business practices with government-wide regulations and policy.
5. Ensures the agency is in compliance with OMB Circular A-130, FISMA, the agency's IT Security Plan, Executive Presidential orders on cybersecurity and other applicable regulations, policies and procedures.
6. Cybersecurity program duties include development of security policies, standards, architecture, practices and procedures compliant with all applicable policies, rules, regulations and laws; ongoing testing and accreditation of security practices and systems; administration and support for operational security systems; independent assurance of program-wide compliance; and security monitoring and incident response management. Ensures reporting of security program performance, cost tracking, and periodic status presentations to senior leadership.
7. Maintains contact with manufacturers, professional groups, and user groups to ensure that the agency has knowledge of efficient, economical information handling capabilities. Provides oversight, and promotes the use of innovative technologies using secure, risk based methodologies to ensure that information and records are secure, properly managed, and readily accessible.
8. Establishes cybersecurity baselines and standards for all NIGC operating systems, security architecture, cyber risk and intelligence, data loss and fraud prevention techniques, identity and access management protocols, and communication platform services.

***Note: This position is not supervisory at this time, but may become supervisory as agency requirements change.

This position is in the excepted service and not subject to competitive service procedures. Competitive Civil Service status is not acquired under this appointment. New appointees to the excepted service must serve a two year trial period. Merit Promotion procedures do not apply.

The NIGC has determined that the duties of this position are suitable for telework per agency policy.

Conditions of employment

1. You must be a U.S. Citizen.
2. You will be subject to a background/suitability investigation/determination.
3. You will be required to have federal payments made by Direct Deposit.
4. You must submit ALL required documents and a completed questionnaire.
5. Selective Service: If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service system, or are exempt from having to do so under the Selective Service Law. See http://www.sss.gov/.

Qualifications

To qualify for this vacancy, you must meet both the basic requirement and specialized experience requirement.

Basic Requirement:
To meet the basic qualification requirements for this position, you must have:
A Bachelor of Science or Bachelor of Arts, or higher level degree in: Computer Science, Information Systems, or related field from an accredited college or university. Degree must be from a college or university accredited by the U.S. Department of Education.
OR
Four (4) years of professional work experience in the fields above.
AND
Individuals must have IT-related experience demonstrating each of the four competencies listed below.

1. Attention to Detail- Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Communication- Expresses information clearly in oral and written format, taking into account the audience and nature of the information.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations

Specialized Experience:
To qualify for the GS-15 level, all applicants must possess at least one full year of specialized experience unless otherwise specified at or equivalent to the GS-14 level in the Federal service, or comparable experience not gained in the federal service. Specialized experience is defined as:

• Demonstrated leadership experience and success in delivery of functions in risk management, information security, technical operational security, and information technology.
• Managing and overseeing a Cybersecurity Program for an organization with responsibility for planning, organizing and executing all program activities.
• Developing and reviewing policies, guidelines, procedures and training materials for an Information Security program.
• Communicating IT security issues, in business terms to policy-makers, leadership, and staff.
• Minimum of 3 years of hands-on experience with developing and maintaining the Authority to Operate (ATO) security authorization processes for federal information systems. Experience should entail knowledge of NIST Special Publications, application of Cybersecurity/Risk Management Framework methodologies, and working with the FedRAMP approval process for leveraging authorizations on the use of cloud technologies.
• Minimum of 5 years hands-on technical experience securing IT systems in a hybrid-cloud environment.
• Applicant must hold one active relevant technical security certification prior to selection (e.g., CISSP, CISA, CISM).

**Experience in the casino gaming industry specializing in IT Security is highly desired, but not required.


All qualification requirements must be met by the closing date of this announcement.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Once the application process is complete, we will review your application to ensure you meet the job requirements. To determine if you are qualified for this job, a review of your resume, supporting documentation and responses to the online questionnaire will be made.

To preview the assessment questionnaire click: https://apply.usastaffing.gov/ViewQuestionnaire/11718276