As the Director of Enterprise Cybersecurity Policy & Strategy in the DHS Office of the Chief Information Officer (OCIO) Chief Information Security Officer Directorate (CISOD), you will lead and direct executive efforts to develop, build, implement and operationalize cybersecurity policies, procedures, and tools critical to DHS IT systems security.

As a DHS Cybersecurity Service Employee in the Leadership Track, at the Senior Cybersecurity Manager level, you will apply your technical and leadership expertise in Risk Management and Compliance to oversee multiple DHS Federal cybersecurity programs, organizations, employees, and contract resources to manage a range of unusually difficult tasks, including:

• Providing management oversight when defining the scope and level of detail for short- and long-term DHS security and risk management plans and policies.
• Supervising a staff of Information Technology Specialists responsible for the development, implementation and evaluation of cybersecurity policies and protocols to enhance the security of DHS networks and IT systems.
• Overseeing technical and nontechnical evaluation, documentation, validation, assessment, and authorization processes to ensure existing and new information technology systems meet the Department's cybersecurity and risk standards.
• Leading teams conducting risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities and mitigate risks.
• Promoting security awareness and compliance among DHS stakeholders and/or other partners, ensuring organizations' visions reflect sound principles and directives, laws, and regulations are properly followed.
• Organizing and driving efforts to identify the need for policy changes or modifications based on new, evolving security technologies or threats.
• Supervising staff to ensure appropriate applications of risk tolerance, compliance, and assurance, reporting on the security state of systems to appropriate organizational stakeholders when needed.
• Providing strategic direction and technical oversight to teams evaluating system, network and software designs and proposals for potential security risks, resolving integration issues related to the implementation of new systems within the existing infrastructure.
• Directing and coordinating IT leaders monitoring and maintaining ongoing situational awareness regarding the security and privacy posture of systems and/or the organization in support of risk management decisions.
• Managing the development and delivery of customized communications including internal briefings, congressional testimony, and other high-level strategy or policy presentations to different levels of leadership and stakeholders.

Conditions of employment

• You must be a U.S. Citizen or national.
• You must be 18 years of age.
• Must be registered for the Selective Service (if you are a male).
• Must be able to obtain and maintain a Top Secret/SCI security clearance.
• Must be able to submit to a drug test and receive a negative result.
• Must be able to comply with ethics and standards of conduct requirements, including completing any applicable financial disclosure.
• May be required to serve a 3 year probationary period.
• While this position can be considered telework eligible, individuals must live within 2 hrs driving distance to a DHS SCIF.
• Remote work may be available for this position.

Qualifications

This position is in the Leadership Track at the Senior Cybersecurity Manager career level. DHS Cybersecurity Service employees start at career levels and salaries matching their experience and expertise. To learn more about DHS Cybersecurity Service career tracks and levels, visit our application portal.

Senior Cybersecurity Managers generally:

• Have 12+ years of cybersecurity work experience.
• Have 5+ years of leadership experience.
• Are capable of serving as seasoned cybersecurity manager who oversees multiple DHS or Federal cybersecurity programs or DHS organizations, including employees and contract resources, through subordinate managers.

• Oversee, evaluate, and supports the documentation, validation, assessment, and authorization processes necessary to ensure that existing and new information technology systems meet the Department's cybersecurity and risk requirements, and provide decision makers with the knowledge to make well-informed risk decisions.
• Ensure that strategic considerations drive investment and operational decisions with regard to managing risk to organizational operations (including mission, function, image and reputation), organizational assets, individuals, other organizations (collaborating or partnering with federal agencies and contractors) and the nation.
• Understand and utilize the NIST series of documents.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

All DHS Cybersecurity Service applicants participate in a multi-phase assessment process, which varies by career track. For the Leadership Career Track, applicants participate in a two-phase assessment process:

• You must successfully complete each phase to advance to the next phase.
• The total time commitment for the two phases is approximately 5-6 hours (many applicants require less time!)
• Before each phase, DHS will e-mail you instructions and information to help you prepare.
• Assessments are time sensitive, so monitor your e-mail to ensure you have plenty of time to complete them prior to any deadlines.

• Unproctored - you choose the time and location
• Includes three assessments: (1) a work styles inventory that will take about 30 minutes to complete; (2) a work simulation that you will have up to 2 hours to complete; and (3) a leadership simulation that you will have up to 2.5 hours to complete
• The three assessments take about 3 hours (on average) to complete
• Requires a computer with audio (speakers or headphones) and a reliable internet connection.
• No knowledge of DHS or cybersecurity is required for these assessments, which measure non-technical capabilities that are important for professional success in the DHS Cybersecurity Service. This includes how you communicate, analyze information, and collaborate with others:
  • The work styles inventory presents you with questions about your work-related interests and preferences.
  • The work simulation presents you with realistic, work-related scenarios and asks you to respond to them.

• Proctored - must be scheduled in advance and completed at a designated assessment center
• There is a different assessment for each DHS Cybersecurity Service technical capability (visit Jobs to learn more about the technical capabilities).
• Most individuals only have a primary technical capability and complete only one Technical Capability Assessment, but in limited circumstances, you may complete a second Technical Capability Assessment.
• You will have up to 2.5 hours to complete each Technical Capability Assessment; each takes about 90 minutes (on average) to complete.
• Assessments present realistic, work-related cybersecurity scenarios/questions to assess technical skills.
• Cybersecurity knowledge is assessed, but no knowledge of DHS is required.