This position is located in the Compliance Reporting Unit (CR), Enterprise Chief Information Security Office (DT/E-CISO) leads a high-visibility cybersecurity compliance and assurance program responsible for supporting FISMA, OMB, CISA, OIG, GAO, OMB Circular A-123, NIST SP 800-53 Rev. 5, NIST Cybersecurity Framework, Zero Trust implementation reporting, RMF IV&V activities, High Value Asset assessments, and compliance activities involving National Security Systems.
Summary
This position is located in the Compliance Reporting Unit (CR), Enterprise Chief Information Security Office (DT/E-CISO) leads a high-visibility cybersecurity compliance and assurance program responsible for supporting FISMA, OMB, CISA, OIG, GAO, OMB Circular A-123, NIST SP 800-53 Rev. 5, NIST Cybersecurity Framework, Zero Trust implementation reporting, RMF IV&V activities, High Value Asset assessments, and compliance activities involving National Security Systems.
U.S. Department of State career or career conditional status employees in the competitive service; employees who are on temporary or other non-status appointments who have reinstatement or non-competitive eligibility for a competitive service appointment (e.g., tenured Foreign Service employees, employees on an excepted service appointment at the USUN who have previous career status, etc.); and CTAP.
Serves as the Unit Chief for Compliance Reporting, overseeing Risk Management Framework (RMF) Independent Verification and Validation (IV&V), High Valued Asset (HVA)assessments, audit coordination, evidence validation, and risk reporting.
Leads and manages a cybersecurity compliance and audit team for Department-wide assurance and reporting activities, including risk management, IV&V, National Security Systems, and related functions.
Directs the development, validation, and submission of cybersecurity compliance reports required for FISMA, OMB, CISA, OIG, GAO, A-123, internal control, and executive leadership.
Oversees Risk Management Framework IV&V activities to evaluate the quality, accuracy, completeness, and effectiveness of security authorization packages and control implementation statements.
Conducts and supervises HVA assessments to evaluate cybersecurity risks, mission impact, control effectiveness, vulnerability, resilience, segmentation, logging, identity management, access and configuration management.
Must be able to obtain and maintain a Top Secret security clearance.
Must complete a supervisory probationary period if one has not already been completed.
Qualifications
The position requires senior-level cybersecurity judgment, supervisory leadership, audit readiness experience, executive communication skills, and the ability to translate complex cybersecurity, compliance, audit, and risk information into accurate, defensible, and actionable reports for senior leaders and federal oversight stakeholders.
The Incumbent leads a high-visibility cybersecurity compliance and assurance program responsible for supporting FISMA, OMB, CISA, OIG, GAO, OMB Circular A-123, NIST SP 800-53 Rev. 5, NIST Cybersecurity Framework, Zero Trust implementation reporting, RMF IV&V activities, High Value Asset assessments, and compliance activities involving National Security Systems.
Applicants must meet all the required qualification requirements described below by the closing date of this announcement.
NOTE: Applicants must meet time-in-grade and time after competitive appointment requirements, by the closing date of this announcement.
Applicants applying for the GS-15 grade level must meet the following requirements:Have IT-related experience demonstrating EACH of the four competencies AND specialized experience listed below:
Attention to Detail - Thorough when performing work and conscientious about attending to detail.
Customer Service - Works with clients and customers (individuals who use or receive the services or products that your work produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
Oral Communication - Expresses information (ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (technical, sensitive, controversial); makes clear and convincing oral presentation; listens to others, attends to nonverbal cues, and responds appropriately.
Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgement to generate and evaluate alternatives, and to make recommendations.
AND Have at least 1 full year of specialized experience equivalent to the GS-14 level in the Federal service which provided you with the particular knowledge, skills and abilities to perform the duties of the position.
Qualifying specialized experience must demonstrate the following:
Leading cybersecurity compliance reporting for a federal agency, large organization, or complex enterprise environment.
Applying federal cybersecurity requirements, including FISMA, OMB, CISA, OIG, GAO, A-123, NIST SP 800-53 Rev. 5, NIST Cybersecurity Framework, Risk Management Framework, and Zero Trust requirements.
Supervising or leading teams responsible for cybersecurity compliance, RMF IV&V, High Value Asset assessments, audit coordination, POA&M reporting, evidence validation, control assessment, risk management, or executive reporting, assessment planning, evidence collection, technical validation, mission impact analysis, cybersecurity risk analysis, remediation tracking, and executive reporting.
NOTE: In order to qualify for this position, your experience MUST be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. There is no substitute of education for specialized experience for the GS-15 position.
In addition, applicant's experience must also demonstrate that the candidate possesses the following qualities:
Ability to assign, review, and supervise the work of others;
Objectivity and fairness in judging people on their ability, and situations on the facts and circumstances;
Ability to adjust to change, work pressures, or difficult situations without undue stress;
Willingness to consider new ideas or divergent points of view; and
Capacity to "see the job through."
Education
Education requirements do not apply to this vacancy announcement.
If eligible, situational telework agreements may be permitted with supervisory approval.
Multiple positions may be filled from this announcement. If eligible, applicants to this announcement may be referred to other similar positions in other Bureaus/Offices in the Department for up to 240 days and may require a higher or lower security clearance. Telework eligibility and security clearance requirements may vary for such similar positions.
Agency & Interagency Career Transition Assistance Program (CTAP & ICTAP): View OPM’s CTAP & ICTAP eligibility website for more information. You must be rated in the Well-Qualified category and submit supporting documents under the required documents section of this announcement to receive selection priority consideration. To be considered Well-Qualified applicants must: score an 85 or above, meet Minimum Qualifications, and demonstrate proficiency in some, but not all major aspects of the position.
Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
How you will be evaluated
You will be evaluated for this job based on how well you meet the qualifications above.
The evaluation process consists of the ApplyGov Competency Based Assessments and a crediting plan for which applicants will be assigned a score between 70 and 100. A resume review will be conducted for minimum qualification requirements, as described in the “Qualifications” section of this announcement, of the top qualified candidates based on combined total score. Resumes longer than two pages will be deemed ineligible and will not be considered further. Responses to questions that are not fully supported by your resume may result in a rating adjustment.
You will be assessed on the following job-related competencies (knowledge, skills, abilities, and other characteristics):
Supervisory: Oral Communication, Interpersonal Skills, Problem Solving, Decision Making, Customer Service, Leadership, Planning & Evaluating, Influencing/Negotiating, Strategic Thinking, Human Capital Management.]
Set aside at least 2 hours to take the external assessments; however, most applicants complete the assessments in less time. There are timed sections that must be completed within the allotted timeframe.
Your score from the external assessment (supervisory)will remain on file for 180 days, allowing you to apply for multiple DOS-announced positions without needing to retake the assessments.
Top applicants may be referred to the hiring manager for further consideration. The assessment is used to measure the degree in which your background matches the competencies and KSAs required for this position. Your qualifications will be evaluated on the following competencies:
Ability to lead enterprise-level cybersecurity reporting activities supporting federal mandates, oversight requirements, and executive decision-making.
Ability to lead, supervise, assign work, manage performance, mentor staff, and direct complex cybersecurity compliance and assurance operations.
Ability to lead, conduct, and oversee independent validation of RMF authorization packages, control implementation, assessment results, POA&Ms, continuous monitoring evidence, and risk acceptance documentation.
Ability to plan, conduct, coordinate, and report on High Value Asset cybersecurity assessments, including risk identification, control validation, vulnerability exposure, mission impact, resilience, remediation tracking, and executive reporting.
Ability to coordinate OIG, GAO, A-123, FISMA, and other cybersecurity audit or review activities.
Ability to support cybersecurity reporting involving National Security Systems, classified environments, mission systems, or sensitive information systems.
Applicants found to be among the top qualified candidates will be referred to the hiring official for further consideration and possible interview. Qualified non-competitive candidates must be deemed best qualified based on the applicant assessment in order to be referred to the hiring official for further consideration and possible interview.
In describing your experience, please be clear and specific. We do not make assumptions regarding your experience. Overstating your qualifications and/or experience in your application may result in your removal from consideration.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
All required documents listed below, that are applicable to you, must be submitted to our automated system by 11:59 p.m. Eastern Time (ET) on the closing date of this announcement.
1. Resume limited to two pages showing relevant work/volunteer experience, education and training. Include the start and end dates (from month/year to month/year) and the number of hours per week worked/volunteered. Your resume serves as the basis for qualification determinations and must support your answers to the completed online assessment questions. Resumes longer than two pages will be deemed ineligible and will not be considered further.
2. Most recentSF-50s (Notification of Personnel Actions), if you are a current eligible DOS employee (per 3 FAM 2313.4(a)(5)), including current employees applying under a non-competitive hiring authority. The SF-50s must show: effective date, position title, series, grade, salary, tenure, position occupied, full promotion potential, and name of agency. Multiple SF-50s may be needed to show all required information (e.g., promotion, within-grade increase, and separation SF-50s). Award SF-50s often do not show the required information.
3. Performance appraisal, strongly encouraged for current eligible DOS employees. Submit a copy of your most recent (i.e., usually within the last 18 months) final (i.e., not a mid-year review) official (i.e., signed by the rating official and in original format) annual performance appraisal for the hiring manager’s consideration. If a performance appraisal is not available, you may provide a statement and/or a statement from your supervisor explaining the reason one is not available and your servicing HR Office contact information (name, email address, phone number).
Note: You may be requested to provide an appraisal to the hiring official if one was not provided with your application. To receive a promotion, the employee’s most recent performance rating must be “fully successful” or an equivalent level or higher. Employees who are tentatively selected to receive a promotion will be required to provide performance documentation within two business days of request. Servicing HR Offices may be contacted to verify performance ratings.
4. Non-competitive hiring authority eligibility documentation, if applicable. If you are a current eligible DOS employee applying under a non-competitive hiring authority (e.g, FS tenured employees, USUN reinstatement eligibles, Schedule A), you must submit proof of non-competitive eligibility with your application. For information related to Schedule A hiring authority for individuals with disabilities visit OPM’s hiring information site.
5. CTAP documentation, if applicable (e.g., reduction-in-force (RIF) separation notice, certification of expected separation, etc.). In addition submit a copy of your current (or last) performance rating of record which must be at least fully successful or equivalent and submit all required documents listed above that apply to you (e.g., resume, transcripts, SF-50, etc.).
To start your application, click Apply and we’ll walk you through the process to attach a resume and any required documents.
During the application process you can review, edit, delete, and update your information. We’ll automatically save your progress as you go, so you won’t lose any changes. You have until 11:59 p.m. Eastern Time (ET) on the closing date of this announcement to complete the application process.
STEP 1: Select the "Apply" button and follow the instructions to register or sign into USAJOBS.
STEP 2: Submit your resume. Please see the Required Documents section for specific information that should be outlined in your resume.
STEP 3: Complete the online assessment questions.
STEP 4: Submit all required documentation applicable to you, as listed in the Required Documents section.
Technical assistance with your on-line application is available through the Help Desk at mgshelp@monster.com or by calling (866) 656-6830 between the hours of 7:00 a.m. and 7:00 p.m. ET
Alternate Application Procedures
If applying online poses an extreme hardship, you may request alternate application procedures to submit your application package. Contact the Human Resources office listed on the announcement between the business hours of 8:15 a.m. and 5:00 p.m. ET at least 2 working days prior to the closing date of this announcement. The application package for alternate application procedures must be submitted and received in the Human Resources office no later than 11:59 p.m. ET on the closing date of this announcement. Paper applications and information sent by mail will not be accepted.
U.S. Department of State
Not accepting applications by Mail
Charleston, South Carolina 29405
United States
Next steps
After all application packages are received, we will review applications and evaluate applicants’ qualifications. Then, in approximately two weeks after this announcement closes, we will refer candidates, as described in the “How You Will Be Evaluated” section, to the hiring manager for selection consideration. Your application status will be updated up to four times during the following hiring phases:
After applications are received.
After applications are assessed to determine qualifications.
After candidates are referred to the hiring manager.
After a selection is made.
For the selected candidates who receive a tentative job offer, we will conduct a suitability review and/or security background investigation that generally takes an average of at least two to six months.
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.
All required documents listed below, that are applicable to you, must be submitted to our automated system by 11:59 p.m. Eastern Time (ET) on the closing date of this announcement.
1. Resume limited to two pages showing relevant work/volunteer experience, education and training. Include the start and end dates (from month/year to month/year) and the number of hours per week worked/volunteered. Your resume serves as the basis for qualification determinations and must support your answers to the completed online assessment questions. Resumes longer than two pages will be deemed ineligible and will not be considered further.
2. Most recentSF-50s (Notification of Personnel Actions), if you are a current eligible DOS employee (per 3 FAM 2313.4(a)(5)), including current employees applying under a non-competitive hiring authority. The SF-50s must show: effective date, position title, series, grade, salary, tenure, position occupied, full promotion potential, and name of agency. Multiple SF-50s may be needed to show all required information (e.g., promotion, within-grade increase, and separation SF-50s). Award SF-50s often do not show the required information.
3. Performance appraisal, strongly encouraged for current eligible DOS employees. Submit a copy of your most recent (i.e., usually within the last 18 months) final (i.e., not a mid-year review) official (i.e., signed by the rating official and in original format) annual performance appraisal for the hiring manager’s consideration. If a performance appraisal is not available, you may provide a statement and/or a statement from your supervisor explaining the reason one is not available and your servicing HR Office contact information (name, email address, phone number).
Note: You may be requested to provide an appraisal to the hiring official if one was not provided with your application. To receive a promotion, the employee’s most recent performance rating must be “fully successful” or an equivalent level or higher. Employees who are tentatively selected to receive a promotion will be required to provide performance documentation within two business days of request. Servicing HR Offices may be contacted to verify performance ratings.
4. Non-competitive hiring authority eligibility documentation, if applicable. If you are a current eligible DOS employee applying under a non-competitive hiring authority (e.g, FS tenured employees, USUN reinstatement eligibles, Schedule A), you must submit proof of non-competitive eligibility with your application. For information related to Schedule A hiring authority for individuals with disabilities visit OPM’s hiring information site.
5. CTAP documentation, if applicable (e.g., reduction-in-force (RIF) separation notice, certification of expected separation, etc.). In addition submit a copy of your current (or last) performance rating of record which must be at least fully successful or equivalent and submit all required documents listed above that apply to you (e.g., resume, transcripts, SF-50, etc.).
To start your application, click Apply and we’ll walk you through the process to attach a resume and any required documents.
During the application process you can review, edit, delete, and update your information. We’ll automatically save your progress as you go, so you won’t lose any changes. You have until 11:59 p.m. Eastern Time (ET) on the closing date of this announcement to complete the application process.
STEP 1: Select the "Apply" button and follow the instructions to register or sign into USAJOBS.
STEP 2: Submit your resume. Please see the Required Documents section for specific information that should be outlined in your resume.
STEP 3: Complete the online assessment questions.
STEP 4: Submit all required documentation applicable to you, as listed in the Required Documents section.
Technical assistance with your on-line application is available through the Help Desk at mgshelp@monster.com or by calling (866) 656-6830 between the hours of 7:00 a.m. and 7:00 p.m. ET
Alternate Application Procedures
If applying online poses an extreme hardship, you may request alternate application procedures to submit your application package. Contact the Human Resources office listed on the announcement between the business hours of 8:15 a.m. and 5:00 p.m. ET at least 2 working days prior to the closing date of this announcement. The application package for alternate application procedures must be submitted and received in the Human Resources office no later than 11:59 p.m. ET on the closing date of this announcement. Paper applications and information sent by mail will not be accepted.
U.S. Department of State
Not accepting applications by Mail
Charleston, South Carolina 29405
United States
Next steps
After all application packages are received, we will review applications and evaluate applicants’ qualifications. Then, in approximately two weeks after this announcement closes, we will refer candidates, as described in the “How You Will Be Evaluated” section, to the hiring manager for selection consideration. Your application status will be updated up to four times during the following hiring phases:
After applications are received.
After applications are assessed to determine qualifications.
After candidates are referred to the hiring manager.
After a selection is made.
For the selected candidates who receive a tentative job offer, we will conduct a suitability review and/or security background investigation that generally takes an average of at least two to six months.
Fair and transparent
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.
