Clarification from the agency

This job announcement will be used to gather applications that may or may not result in a referral or selection.

Key Responsibilities:

• Serve as Information Systems Security Manager and/or Information Assurance Manager for the Bioeffects Division's cybersecurity systems and enclave.
• Plans, organizes, and manages 711/RHD Information Assurance Program activities to ensure compliance with legal and regulatory requirements and meet customer needs at a geographically separated unit (GSU).
• Maintains and improves the site's overall information assurance posture in accordance with all DoD regulations and the National Industrial Security Program Operating Manual Supplement.
• Manages the following interrelated information assurance programs to ensure compliance with legal and regulatory requirements and fulfillment of customer needs: Information Security, Computer Security, Communications Security and Automated Information System Security Program.
• Leads, coordinates, communicates, integrates and is accountable for the overall success of the program, ensuring alignment with critical agency priorities.
• Implements and advises on information technology security policies and procedures to ensure protection of information transmitted within 711 HPW/RHD on the Joint Base San Antonio/Fort Sam Houston installation and from the installation using Local Area Networks, Wide Area Networks, the World Wide Web, or other communications modes.
• Utilizes current and future multi-level security products collectively to provide data integrity, confidentiality, authentication, non-repudiation, and access control of Local Area Network.
• Work pertains to the administration of all systems, including a myriad of associated hardware platforms, software applications and numerous interfaces included in the Local Area Network.
• Performs other duties as assigned.
• Develops cyberspace plans, strategy, and policy to support and align with organizational cyberspace missions and initiatives.
• Performs services as systems administrator: Serves as a systems administrator responsible for planning, coordinating, modifying, implementing, and troubleshooting to meet customer needs.

Conditions of employment

• U.S. Citizenship Required
• Males must be registered for Selective Service, see www.sss.gov
• This position requires possession of or the ability to obtain a Top-Secret security clearance.
• Recruitment incentives may/may not be authorized
• This posn is subject to provisions of the DoD Priority Placement Program
• This is a Testing Designated Position. The incumbent may be subject to pre-employment drug testing as a condition of employment, and participation in random drug testing.
• Must have and maintain current (within 3 years) qualification and certification standards (compliant with DoD 8570.01-0M and DoD 8140.01 M).
• Disclosure of Political Appointments
• Direct Deposit: All federal employees are required to have direct deposit.
• Employee may be required to serve a probationary period.
• Upon completion of your probationary/trial period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.
• Travel and/or performance of additional duties may be required.
• This position is an Acquisition Professional Development Program (APDP) position requiring Tier 2 (Practitioner) Non-Critical certification in Engineering and Technical Management (N).
• Selectee will have 5 years to complete certification requirements and must have 4 years of experience to become fully certified.

Qualifications

Experience requirements are described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions, Information Technology (IT) Management Series 2210 (Alternative A). Due to the use of 120-day rosters, this period of experience may be completed within 120 days of the closing date of this announcement.

SPECIALIZED EXPERIENCE: Applicants must have at least 1 year (52 weeks), or will have one year within 120 days of closing of this announcement, specialized experience equivalent to the DO-01, or equivalent grade level in the Federal service. Specialized experience includes planning, organizing, and managing Information Assurance (IA) Program activities for computer systems; serving as Information System Security Officer (ISSO/M); managing network security programs; implementing and advising on IT security policies and procedures; and/or serving as a Cybersecurity Liaison Officer.

Desired Qualifications

CERTIFICATIONS:

• Required Certifications: CompTIA Security+, CISSP and/or CISM
• Desired Certifications, but not necessary: CGRC/CAP, SSCP

EXPERIENCE:

• Experience in developing/researching/implementing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data;
• Experience in serving as, assisting, or assuming responsibilities of an Information Systems Security Manager (ISSM);
• Strong track record in conducting risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs;
• Expertise with maintaining/assisting with a cybersecurity program that includes cybersecurity architecture, requirements, objectives and policies, cybersecurity personnel, and cybersecurity processes and procedures.

• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities.
• Skill in determining how an IT security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• Ensure plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
• Continuously validate the organization's compliance with policies/guidelines/procedures/regulations/laws.
• Oversee policy standards and implementation strategies to ensure procedures and guidelines comply with cybersecurity policies.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your application package (resume, supporting documents, and responses to the questionnaire) will be used to determine your eligibility, qualifications, and quality ranking for this position. Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

The resume/documents you submit must support your responses to the online questionnaire. If your application contradicts or does not support your questionnaire responses, you will receive a rating of "not qualified" or "insufficient information" and you will not receive further consideration for this job.

For additional information on what to include in your resume, click here.

APPRAISALS/AWARDS: Hiring Managers use objective methods and consider previous performance appraisals and awards in the selection process. Current Federal Civilian employees should list any relevant performance related rating and/or awards in your resume.

Applicants who disqualify themselves will not be evaluated further.