Skip to main content
U.S. flag
 

Cybersecurity Compliance Office Lead (O-6 Billet) Supervisory

Department of Homeland Security
Immigration and Customs Enforcement
ICE Health Service Corps (IHSC)

Summary

The Cybersecurity Compliance Office Lead role supervises program managers, coordinates authorization and continuous-monitoring activities, manages risks and compliance milestones, supports acquisition and contract teams, and provides leadership with readiness assessments and recommended actions.

This position is only open to current USPHS officers.
USPHS Call to Active Duty (CAD) candidates are not eligible for this position.

Overview

Help
Location
1 vacancy in the following location:
Work site options
Telework eligible
Yes—Situational telework may be available, based on the needs of the agency.
Remote job
No
Relocation expenses reimbursed
Yes—Please note that upon selection, the candidate must live within 50 miles of an IHSC Field Office.
Salary
$1 - $150,000 per year

Please note that the salary is dependent on the officer's rank, years in service, and location of duty station.

Pay scale & grade
CC 6
Promotion potential
None
Pay scale and grade determines the salary of the job.
Work schedule
Full-time
Travel Required
Occasional travel - You may be expected to travel for this position.
Appointment type
Permanent
Occupations and job series
Supervisory status
Yes
Federal service type
This job is in the Excepted Service
Represented by a union
No
Drug test
Yes
Security clearance
Other
Position sensitivity and risk
Special-Sensitive (SS)/High Risk
Jobs require a background check and some require a security clearance. The type depends on the job.
Background check type
Financial disclosure required
No
Some jobs require financial disclosure to identify conflicts of interests.
Announcement number
IHSC-CAMS-CCO-O6-S-2027
Control number
890324700

This job is open to

Help

Clarification from the agency

Applicants must be a current USPHS Commissioned Corps Officer. USPHS Call to Active Duty (CAD) candidates are not eligible for this position. Civilians are not eligible for this position.

Videos

Duties

Help

DUTIES AND RESPONSIBILITIES:

  1. Supervises and leads a team of three Cybersecurity and Privacy Program Managers responsible for cybersecurity and privacy compliance workstreams. Establishes workload distribution, priorities, timelines, documentation standards, and quality expectations for the office.
  2. Serves as the accountable CAMS leader for program and portfolio management of cybersecurity and privacy compliance work across the IHSC health information technology portfolio. Directs management of milestones, schedules, dependencies, action items, risk visibility, and required coordination activities.
  3. Ensures cybersecurity and privacy requirements are identified during acquisition planning and reflected in acquisition requirements documentation before an acquisition is referred to the contracting office. Coordinates with the Acquisition Planning Office to ensure compliance requirements are incorporated early in the acquisition lifecycle.
  4. Oversees office support provided in coordination with the ICE Office of the Chief Information Officer for authorization-related activities, including Risk Management Framework documentation, required artifacts, milestones, and coordination with system owners, Authorizing Officials, and information system security officers.
  5. Maintains visibility of continuous-monitoring activities across the portfolio, including compliance status, open findings, corrective actions, dependencies, and aging items requiring attention. Ensures significant compliance issues are tracked, assigned, elevated, and resolved through the appropriate authorized officials.
  6. Establishes Government programmatic priorities and requirements for assigned cybersecurity and privacy compliance activities. Coordinates contractor performance through the Contracting Officer or an appointed Contracting Officer's Representative, as appropriate, while preserving Government decision-making authority.
  7. Coordinates with privacy officials to ensure potential privacy implications are identified early and formal privacy reviews occur at an appropriate point in the acquisition and system lifecycle. Ensures privacy-related requirements, risks, and actions are documented and routed to officials holding formal authority.
  8. Coordinates with the Portfolio Management Office to ensure cybersecurity and privacy milestones, dependencies, constraints, and risks are accurately reflected in enterprise schedules, planning documents, and portfolio-management activities.
  9. Coordinates with the Acquisition Planning Office and Contract Governance Office to ensure cybersecurity and privacy obligations carry through from acquisition planning into contract performance, oversight, and transition activities.
  10. Identifies, assesses, and escalates material security, privacy, and compliance risks. Provides CAMS and HITU leadership with recommendations, readiness assessments, and analysis of likely programmatic, schedule, cost, and mission impacts.
  11. Provides unit leadership with portfolio status reports, compliance-posture summaries, risk assessments, and readiness information supporting executive decision-making. Translates technical cybersecurity and privacy information into clear programmatic impacts and recommended actions for executive leadership, program officials, and acquisition personnel.
  12. Develops and implements office operational plans, procedures, documentation standards, recordkeeping practices, and process improvements necessary to achieve CAMS and HITU objectives. Captures institutional knowledge to support continuity through personnel transitions.
  13. Performs supervisory duties, including performance management, work planning, coaching, mentoring, employee development, and accountability for assigned officers. Identifies developmental needs and ensures completion of required position-specific training.
  14. Establishes and enforces appropriate information-protection practices. Ensures proper handling of procurement-sensitive, proprietary, security, privacy, and system information.
  15. Performs other duties as assigned.

Requirements

Help

Conditions of employment

  • You must be a U.S. citizen to apply for this position.
  • You must successfully pass a background investigation.
  • You must successfully pass a drug screen.
  • Males born after 12/31/59 must certify registration with Selective Service.
  • Requirements by Closing Date: Unless otherwise noted, you must meet all requirements by the closing date of the announcement.
  • Service Remaining Requirement Agreement: Upon appointment to this position, officers will be required to serve an 18 to 24-month commitment to IHSC.
  • ASSIGNMENT PAY AGREEMENT: You must not have a current Assignment Pay Agreement. However, if you have a current Assignment Pay Agreement, it must be fulfilled within 90 days of your application submission.
  • Applicants must be a current USPHS Commissioned Corps Officer. USPHS Call to Active Duty (CAD) candidates are not eligible for this position. Civilians are not eligible for this position.
  • PHS officers must participate in IHSC TDY On-Call Schedule (ITOS.) ITOS is either an entire month or two 16-day periods a year where, depending on the needs of the agency, the officer is required to be available to serve.

Qualifications

PHYSICAL DEMANDS:

  1. Sit and/or stand for extended periods of time, generally six to eight hours.
  2. Perform repeated bending motions.
  3. Use average manual dexterity for computer operation.
  4. Use a telephone for extended periods.
If the incumbent is a clinician, the incumbent may be required to perform temporary duty assignments in support of field operations for a minimum of two weeks and a maximum of 30 days annually.

Education

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES:

  1. Ability to lead multidisciplinary projects, workstreams, and portfolios involving program, acquisition, technical, cybersecurity, privacy, and compliance stakeholders.
  2. Working knowledge of cybersecurity and privacy compliance practices, including authorization activities, compliance documentation, risk management, and continuous monitoring, sufficient to manage work and recognize material risks.
  3. Ability to understand technical cybersecurity and privacy discussions, ask informed questions, and translate technical findings into programmatic, schedule, cost, and mission impacts.
  4. Knowledge of the acquisition lifecycle sufficient to ensure cybersecurity and privacy requirements are incorporated into acquisition planning and contract performance rather than addressed after award.
  5. Ability to supervise, develop, evaluate, and hold accountable assigned professional staff; assign work by portfolio; and establish clear ownership and performance expectations.
  6. Ability to coordinate contractor-provided technical support while maintaining appropriate Government authority and ensuring that Government decisions remain with authorized Government officials.
  7. Ability to communicate concisely and effectively with executive leadership, including presenting adverse security, privacy, or compliance information with a recommendation for action.
  8. Ability to recognize the boundary between coordinating activities involving an authority and exercising that authority, and to route decisions to the officials who hold the appropriate decision-making authority.
  9. Ability to build and sustain productive working relationships with program officials, acquisition personnel, technical specialists, privacy officials, cybersecurity officials, system owners, contractors, and executive leadership.
  10. Ability to establish, maintain, and enforce documentation and recordkeeping standards while protecting sensitive acquisition, security, privacy, proprietary, and system information.
  11. Ability to exercise sound, independent judgment in managing complex, sensitive, and mission-critical programmatic issues.
  12. Ability to adapt to changing priorities, schedules, workload requirements, and mission needs.
MINIMUM QUALIFICATIONS

Applicants must meet the education and professional requirements applicable to their USPHS professional category. No specific academic discipline is required for this position.

Applicants must demonstrate progressively responsible program-management experience, including experience leading or supervising professional staff and coordinating work performed by technical specialists.

Applicants must have at least two years of experience in one or more of the following areas:
  • Cybersecurity, information security, information assurance, information technology governance, or related work;
  • Privacy, information governance, compliance, risk management, or related work;
  • Authorization support, continuous monitoring, Risk Management Framework activities, or related compliance work;
  • Program management, project management, contractor management, health information technology, health care technology, or comparable complex multidisciplinary work.
Leadership, judgment, program-management capability, and demonstrated effectiveness in complex, regulated, or mission-driven environments are primary evaluation criteria. Technical depth in a single specialty does not substitute for the ability to lead an office and coordinate work across organizational boundaries.

Relevant preparation may be demonstrated through a combination of prior cybersecurity, privacy, program-management, project-management, compliance, governance, health information technology, authorization-support, or contractor-management experience; relevant coursework; professional training; or professional certifications. Certifications such as Security+, Project Management Professional, Certified in Governance, Risk and Compliance, privacy credentials, or Federal Acquisition Certification for Contracting Officer's Representatives may strengthen an applicant's preparation but are not required.

If the incumbent holds a clinical license or certification, the incumbent is responsible for fulfilling the requirements of the applicable licensing or certifying body to maintain currency.

Additional information

This is a U.S. Public Health Service (PHS) position within the Department of Homeland Security (DHS), U.S. Immigration and Customs Enforcement (ICE), Enforcement and Removal Operations (ERO), ICE Health Service Corps (IHSC), Office of the Deputy Assistant Director of Administration, Health Information and Technology Unit (HITU), Contracts and Acquisition Management Section (CAMS), Cybersecurity Compliance Office (CCO). This is a supervisory position.

The incumbent serves as the Lead for the Cybersecurity Compliance Office and provides leadership, direction, and oversight to a team of three Cybersecurity and Privacy Program Managers. The incumbent manages office performance, workload distribution, quality standards, and cybersecurity and privacy compliance activities across the IHSC health care technology portfolio. The incumbent reports directly to the CAMS Section Chief.

The incumbent leads CAMS coordination of cybersecurity and privacy compliance work from acquisition planning through post-award contract performance. This position is not a technical cybersecurity engineering position. The incumbent manages schedules, documentation, dependencies, compliance activities, authorization support, continuous-monitoring items, risk visibility, and required actions associated with cybersecurity and privacy work. Formal cybersecurity and privacy decisions remain with the authorized officials who hold those authorities.

SUPERVISORY CONTROLS:
The incumbent reports directly to the CAMS Section Chief.

Assignments are generally broad, long-term, and mission-focused. The CAMS Section Chief establishes overall priorities, strategic objectives, organizational expectations, and resource parameters. The incumbent independently plans, directs, prioritizes, and evaluates Cybersecurity Compliance Office operations; assigns portfolios and workstreams; establishes office procedures and quality standards; and coordinates cybersecurity and privacy compliance activities across the IHSC health care technology portfolio.

The incumbent applies applicable DHS, ICE, IHSC, cybersecurity, privacy, acquisition, and information technology governance policies, procedures, precedents, and guidance. The work requires interpretation and adaptation of guidance to address varying acquisition, system, technical, privacy, cybersecurity, schedule, and operational requirements. The incumbent coordinates with authorized cybersecurity, privacy, acquisition, and system officials but does not make decisions reserved to those officials.

The incumbent exercises supervisory authority over three Cybersecurity and Privacy Program Managers. The incumbent provides work assignments, establishes performance expectations, evaluates work products, monitors workload and performance, provides coaching and developmental feedback, and takes appropriate action to address performance or conduct concerns.

The incumbent keeps the CAMS Section Chief informed of office performance, portfolio compliance posture, material risks, significant dependencies, staffing needs, emerging issues, and recommended actions. Work is reviewed in terms of accomplishment of CAMS and HITU objectives, effectiveness of office operations, quality of supervisory leadership, adherence to applicable policy, and successful support of IHSC mission requirements. Significant innovations, changes to office procedures, and modifications to established practices are coordinated with and approved by the CAMS Section Chief.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

We will review your resume and supporting documentation to ensure you meet the minimum qualification requirements. You may be selected for an interview at the hiring authority's discretion. You will be notified of selection or non-selection.

Immigration and Customs Enforcement

The Department of Homeland Security (DHS) is calling on those who want to help protect American interests and secure our Nation. DHS components work collectively to prevent terrorism; secure borders and our transportation systems; protect the President and other dignitaries; enforce and administer immigration laws, safeguard cyberspace; and ensure resilience to disasters. We achieve these vital missions through a comprehensive workforce spanning hundreds of occupations. Make an impact; join DHS.

The mission of U.S. Immigration and Customs Enforcement (ICE) is to protect America from the cross-border crime and illegal immigration that threaten national security and public safety. ICE focuses on smart immigration enforcement, preventing terrorism, and combating the illegal movement of people and goods. ICE is the principal investigative arm of DHS and the second largest investigative agency in the federal government. Created in 2003, through a merger of the investigative and interior enforcement elements of the U.S. Customs Service and the Immigration and Naturalization Service, ICE has more than 20,000 employees in more than 400 offices in the United States and around the world. ICE is a key component of the DHS layered approach to protecting our nation from a wide range of threats. For additional information about ICE and career opportunities, please visit www.ice.gov.

Agency contact information

IHSC Recruiting
Email
IHSCrecruiting@ice.dhs.gov
Address
ERO-DRO-IHSC Public Health Service
500 12th Street SW
Washington, DC 20536
US

Visit our careers page

Learn more about what it's like to work at Immigration and Customs Enforcement, what the agency does, and about the types of careers this agency offers.

https://www.ice.gov/detain/ice-health-service-corps

Your session is about to expire!

Your USAJOBS session will expire due to inactivity in 8 minutes. Any unsaved data will be lost if you allow the session to expire. Click the button below to continue your session.