This position is located in the Cybersecurity and Privacy Division (CSPD) of the Office of the Chief Information Officer (OCIO). As a Cybersecurity Risk Manager (CSRM), you will guide stakeholders as they implement assessment and authorization policies and procedures, cybersecurity continuous monitoring, and risk management activities. You will collaborate with other CSRMs to provide support for stakeholders in identifying, communicating, and managing cybersecurity risks.
Summary
This position is located in the Cybersecurity and Privacy Division (CSPD) of the Office of the Chief Information Officer (OCIO). As a Cybersecurity Risk Manager (CSRM), you will guide stakeholders as they implement assessment and authorization policies and procedures, cybersecurity continuous monitoring, and risk management activities. You will collaborate with other CSRMs to provide support for stakeholders in identifying, communicating, and managing cybersecurity risks.
Duties described below are at the highest grade advertised. Duties assigned at lower grade levels will be of more limited scope, performed with less independence and limited complexity; duties will be commensurate with the grade of selected employee.
Validate the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
Validate that security controls are correctly implemented and remain effective throughout the system lifecycle. Design or advise on technical solutions to complex problems which require technical expertise and ingenuity.
Leads information system stakeholders by ensuring their assessment readiness, effective continuous monitoring, and ongoing adherence to risk management activities, while providing technical oversight and cybersecurity consultation to stakeholders.
Identify patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.
Negotiate with program security, cybersecurity management, stakeholders, and other relevant parties to clarify requirements and resolve issues while balancing mission needs against compliance mandates.
Perform security analysis, identify threats, and prioritize vulnerabilities to define and assess compliance with accepted government standards and regulations.
Advise senior management, such as Authorizing Officials (AO), Chief Information Officer (CIO), and Chief Information Security Officer (CISO) on cybersecurity risk levels and security posture.
Develop methods to monitor and measure risk, compliance, and assurance efforts. Ensure selected security controls operate as intended in every phase of the information system lifecycle.
Provide leadership and direction to information technology (IT) personnel by ensuring that cybersecurity awareness, basics, literacy, and training are provided to operations personnel commensurate with their responsibilities.
This position is open to U.S. citizens, nationals or those who owe allegiance to the U.S.
This position may require a one-year probationary period. If selected, the requirement to serve such period will be determined by Title 5 of the Code of Federal Regulations, Part 11. **See Additional Information section**
You must meet qualifications requirements by the closing date of this announcement.
Position subject to pre-employment background investigation or higher-level clearance. Investigation/Clearance may differ and be required based on the duty location/NASA Center requirements.
Financial Disclosure, Drug Testing, and/or the Travel Requirements for this position may differ and be required based on the duty location/NASA Center requirements.
Qualifications
Specialized experience is experience that has equipped you with the particular ability, skill, and knowledge to successfully perform the duties of this position and is typically in or related to this line of work.
To qualify for GS-12, you must have one year of directly related specialized experience equivalent to the GS-11 level.
Providing technical security oversight for information systems and balance the demands of multiple customers;
Applying Risk Management Framework (RMF) process and principles, methods and/or practices against specified requirements/controls (e.g., National Institute of Standards and Technology (NIST) Special Publications 800-37, 800-53, and 800-60);
Collaborating with customers and/or business partners to help manage compliance with requirements.
To qualify for GS-13, you must have one year of directly related specialized experience equivalent to the GS-12 level.
Providing technical security oversight for information systems and balance the demands of multiple customers while formulating and driving Agency security priorities;
Applying Risk Management Framework (RMF) process and principles, methods and practices against specified requirements/controls (e.g., National Institute of Standards and Technology (NIST) Special Publications 800-37, 800-53, and 800-60) to develop security plans and continuously monitor the cybersecurity posture of networks and information systems;
Collaborating with customers and/or business partners to perform oversight and manage compliance with requirements to ensure an organization's cybersecurity posture in a risk-based manner that minimizes operational impact.
AND
IF you are qualifying based on experience, you MUST also have IT-related experience demonstrating each of the nine competencies listed below:
Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change.
Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems.
Interpersonal Skills - Treats others with courtesy, sensitivity, and respect. Considers and responds appropriately to the needs and feelings of different people in different situations.
Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
Teamwork - Works well with others in a team environment to achieve goals; helps engender team spirit and commitment by encouraging, modeling, and/or facilitating cooperation, pride, trust, and a sense of group identity among team members.
Technical Competence - Uses knowledge that is acquired through formal training or extensive on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.
Your resume must include a clear and detailed narrative description, in your own words, of how you meet the required specialized experience. Experience statements copied from a position description, vacancy announcement or other reference material constitutes plagiarism and may result in disqualification and losing consideration for the job.
This job does not have an education qualification requirement.
Additional information
Additional selections may be made for similar positions across NASA within the local commuting area(s) of the location(s) identified in this announcement. By applying, you agree to have your application shared with interested selecting official(s) within NASA. CTAP/ICTAP will be cleared for any additional selection from this announcement.
If you have special priority selection rights under the Agency Career Transition Assistance Program (CTAP) or the Interagency Career Transition Assistance Program (ICTAP), you must:
- Indicate your eligibility when applying for a position. The questionnaire asks you to identify your ICTAP/CTAP eligibility.
- Meet the minimum qualifications requirements for the position
- Submit proof that you meet the requirements for CTAP/ICTAP as indicated in 'Required Documents'
Any applicant that received a Voluntary Separation Incentive Payment (VSIP) from the federal governmentwithin the last five years based of the closing date of this announcement, if selected, may be required to repay the full amount prior to establishing a start date. For additional information on the VSIP repayment requirement, click here - https://www.opm.gov/policy-data-oversight/workforce-restructuring/voluntary-separation-incentive-payments/.
Per Executive Order 14343, this position is not part of a bargaining unit.
Probationary Period
You may be required to serve a one-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. If selected, the requirement to serve such period will be determined by Title 5 of the Code of Federal Regulations, Part 11.
In determining if your employment advances the public interest, we may consider:
your performance and conduct;
the needs and interests of the agency;
whether your continued employment would advance organizational goals of the agency or the Government; and
whether your continued employment would advance the efficiency of the Federal service.
Upon completion of your probationary period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.
Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
How you will be evaluated
You will be evaluated for this job based on how well you meet the qualifications above.
Direct Hire Authority: These positions will be filled through the Office of Personnel Management's Direct Hire Authority. Category rating and veterans' preference will not be considered in evaluating applicants. For more information on Direct Hire Authority, please see: OPM Direct Hire Fact Sheet.
Veterans: Under the provisions of Direct Hire Authority, veterans' preference does not apply. However, applicants who are eligible for veterans' preference are encouraged to include that information in their application and submit supporting documentation (i.e. DD-214, or other substantiating documents). For more information please see: Veterans' Preference information on the FedsHireVets website.
You will be evaluated for this position based on how well you meet the qualifications and eligibility requirements listed in this vacancy announcement. To determine your qualifications and referral status, we may review your resume and supporting documentation and compare it against your responses to the assessment questionnaire. Overstating your qualifications and/or experience in your application materials or assessment questionnaire may result in your removal from consideration.
You will be assessed on the following competencies:
Attention to Detail
Customer Service
Decision Making
Interpersonal Skills
Oral Communication
Problem Solving
Teamwork
Information Assurance
Information Management
Information Systems Security Certification
Technical Competence
Information Systems Security
To preview the application questionnaire, click on the following link: https://apply.usastaffing.gov/ViewQuestionnaire/13044212
NASA considers paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
NASA will not ask you to disclose criminal history record information during the application process or before we make a conditional/tentative offer of employment. If you apply for this position and are selected, NASA will conduct a suitability/security background investigation after you accept a tentative job offer. If you feel you are asked to disclose your criminal history before you accept a tentative offer and wish to file a complaint within 30 days, please contact: Agency-FCCJ@NASA.gov.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
All submitted resumes must not exceed two (2) pages in length. Resumes longer than two pages will be rejected by USAJOBS. Applicants are strongly encouraged to prioritize including experience and relevant qualifications that directly align with the position advertised. All work experience and accomplishments must be associated with dates (month/year) to allow for accurate qualification assessment.
A complete application package includes a resume, required documents and completion of the vacancy announcement questionnaire. Please see this guidance: What to include in your resume. Your resume should describe your specialized experience and support your answers to the vacancy announcement questionnaire. If you are using a Curriculum Vitae (CV) as a resume, it must meet all requirements listed above for a complete resume package.
Please note: if any of the following types of information are included on your resume, your application package will be disqualified:
Classified or government sensitive information.
Social Security Number (SSN)
Photos of yourself
Personal information, such as age, gender, religious affiliation, etc.
Encrypted and digitally signed documents.
If your resume contains any of the above information, you must redact that information prior to the submission of your application.
The following documents are required:
Resume
There may be other supporting documents (licenses, certification, veterans preference, etc.), depending on your answers to the questionnaire and job announcement description, that you may have to submit, please verify your application. Do not submit an OF-306 with your application.
If you are a surplus or displaced employee (CTAP and ICTAP), submit proof that you meet the requirements for CTAP/ICTAP. This includes copies of your agency notice, most recent Performance Rating and most recent Notification of Personnel Action (SF-50) noting current position, grade level, and duty location.
Official documents are required at the time of appointment for verification of eligibility and qualifications.
Please read the entire announcement and all the instructions before you begin an application and have all required information available. We encourage you to provide a complete description of your educational achievements and include both paid and non-paid work in the experience portion of your resume. If you submit a resume that does not contain the required information, you may lose consideration.
To apply for this position, you must complete the initial online application, to include the initial online assessment and submission of the required documentation specified in the Required Documents section below.
The complete application package must be submitted by 11:59 PM (ET) on the closing date of the announcement to receive consideration. The application process is as follows:
To begin the application process, you will need to be logged into your USAJOBS account. If you do not have a USAJOBS account, you will need to create one before beginning the application process. Once logged in to your account, click on the "Apply" link.
Follow the prompts to select your resume (2 pages or fewer) and/or other supporting documents to be included with your application package. Resumes longer than 2 pages will be rejected by the system. Resumes submitted via other document types will not be forwarded to the hiring manager, nor will they be used in the review of your qualifications. We strongly encourage you to utilize the USAJOBS resume builder when creating your resume. Using the resume builder will help you ensure your resume includes important information related to your qualifications and eligibility for this position. Answer the questions presented in the application and attach all necessary supporting documentation. During the application process you can review, edit, delete and update your information. We'll automatically save your progress as you go, so you won't lose any changes. Your uploaded documents may take several hours to clear the virus scan process.
After acknowledging you have reviewed your application package, complete the 'Include Personal Information' section as you deem appropriate and click to continue with the application process. You will be taken to the vacancy questionnaire which you must complete in order to apply for the position. Complete the online application, verifyall required documentation is included with your application package, and submit the application.
Click the Submit Application button prior to 11:59PM (ET) on the announcement closing date.
NASA's online application process provides step by step guidance to ensure you provide all needed information. If you are unable to apply online, please contact NSSC-STAFFING@MAIL.NASA.GOV for assistance. Be advised - application materials faxed, emailed, and/or mailed to NASA Headquarters will not be accepted for this announcement.
NASA provides reasonable accommodations to applicants with disabilities. If you are an applicant with a disability and need a reasonable accommodation for any part of the application and hiring process, please notify the agency contact center listed on the job vacancy announcement. The decision on granting reasonable accommodations will be on a case-by-case basis.
NASA Headquarters
300 E St SW
Washington, DC 20546
US
Next steps
Once you submit your application package, you will receive an acknowledgement email. Throughout the process you will receive regular status updates through USAJOBS. To verify the status of your application, log into your USAJOBS account (Account Login), all of your applications will appear on the Welcome screen. The Application Status will appear along with the date your application was last updated. For information on what each Application Status means, visit: Application Status.
Whether or not you are contacted for an interview depends upon the location of the position and the judgment of the hiring manager.
If you are selected, you will be notified by phone or email with a tentative job offer. If you fail to meet the conditions of employment or any other pre-employment requirements, such as missing a scheduled appointment, we may rescind a tentative job offer.
An official, written job offer will be issued once all requirements have been verified.
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.
All submitted resumes must not exceed two (2) pages in length. Resumes longer than two pages will be rejected by USAJOBS. Applicants are strongly encouraged to prioritize including experience and relevant qualifications that directly align with the position advertised. All work experience and accomplishments must be associated with dates (month/year) to allow for accurate qualification assessment.
A complete application package includes a resume, required documents and completion of the vacancy announcement questionnaire. Please see this guidance: What to include in your resume. Your resume should describe your specialized experience and support your answers to the vacancy announcement questionnaire. If you are using a Curriculum Vitae (CV) as a resume, it must meet all requirements listed above for a complete resume package.
Please note: if any of the following types of information are included on your resume, your application package will be disqualified:
Classified or government sensitive information.
Social Security Number (SSN)
Photos of yourself
Personal information, such as age, gender, religious affiliation, etc.
Encrypted and digitally signed documents.
If your resume contains any of the above information, you must redact that information prior to the submission of your application.
The following documents are required:
Resume
There may be other supporting documents (licenses, certification, veterans preference, etc.), depending on your answers to the questionnaire and job announcement description, that you may have to submit, please verify your application. Do not submit an OF-306 with your application.
If you are a surplus or displaced employee (CTAP and ICTAP), submit proof that you meet the requirements for CTAP/ICTAP. This includes copies of your agency notice, most recent Performance Rating and most recent Notification of Personnel Action (SF-50) noting current position, grade level, and duty location.
Official documents are required at the time of appointment for verification of eligibility and qualifications.
Please read the entire announcement and all the instructions before you begin an application and have all required information available. We encourage you to provide a complete description of your educational achievements and include both paid and non-paid work in the experience portion of your resume. If you submit a resume that does not contain the required information, you may lose consideration.
To apply for this position, you must complete the initial online application, to include the initial online assessment and submission of the required documentation specified in the Required Documents section below.
The complete application package must be submitted by 11:59 PM (ET) on the closing date of the announcement to receive consideration. The application process is as follows:
To begin the application process, you will need to be logged into your USAJOBS account. If you do not have a USAJOBS account, you will need to create one before beginning the application process. Once logged in to your account, click on the "Apply" link.
Follow the prompts to select your resume (2 pages or fewer) and/or other supporting documents to be included with your application package. Resumes longer than 2 pages will be rejected by the system. Resumes submitted via other document types will not be forwarded to the hiring manager, nor will they be used in the review of your qualifications. We strongly encourage you to utilize the USAJOBS resume builder when creating your resume. Using the resume builder will help you ensure your resume includes important information related to your qualifications and eligibility for this position. Answer the questions presented in the application and attach all necessary supporting documentation. During the application process you can review, edit, delete and update your information. We'll automatically save your progress as you go, so you won't lose any changes. Your uploaded documents may take several hours to clear the virus scan process.
After acknowledging you have reviewed your application package, complete the 'Include Personal Information' section as you deem appropriate and click to continue with the application process. You will be taken to the vacancy questionnaire which you must complete in order to apply for the position. Complete the online application, verifyall required documentation is included with your application package, and submit the application.
Click the Submit Application button prior to 11:59PM (ET) on the announcement closing date.
NASA's online application process provides step by step guidance to ensure you provide all needed information. If you are unable to apply online, please contact NSSC-STAFFING@MAIL.NASA.GOV for assistance. Be advised - application materials faxed, emailed, and/or mailed to NASA Headquarters will not be accepted for this announcement.
NASA provides reasonable accommodations to applicants with disabilities. If you are an applicant with a disability and need a reasonable accommodation for any part of the application and hiring process, please notify the agency contact center listed on the job vacancy announcement. The decision on granting reasonable accommodations will be on a case-by-case basis.
NASA Headquarters
300 E St SW
Washington, DC 20546
US
Next steps
Once you submit your application package, you will receive an acknowledgement email. Throughout the process you will receive regular status updates through USAJOBS. To verify the status of your application, log into your USAJOBS account (Account Login), all of your applications will appear on the Welcome screen. The Application Status will appear along with the date your application was last updated. For information on what each Application Status means, visit: Application Status.
Whether or not you are contacted for an interview depends upon the location of the position and the judgment of the hiring manager.
If you are selected, you will be notified by phone or email with a tentative job offer. If you fail to meet the conditions of employment or any other pre-employment requirements, such as missing a scheduled appointment, we may rescind a tentative job offer.
An official, written job offer will be issued once all requirements have been verified.
Fair and transparent
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.
