Supervisory IT Specialist (INFOSEC)

This position is located in the Department of Health and Human Services, Office of Inspector General, Office of Management and Policy. This announcement is to fill one vacancy that may be located in any of the locations identified. The salary for this position will be adjusted based on the duty location. View the Office of Personnel Management (OPM) pay charts for more information. This announcement will close when 150 applications are received or on the closing date, whichever comes first.

The incumbent will serve as the Chief Information Security Officer (CISO) and will be responsible for performing the following duties and responsibilities, which include but are not limited to: Provide broad policy analysis, consultation, advice, and program management in information security, risk, and privacy, promoting sound security and privacy methods and best industry practices. Oversee the organization's Security Program, including planning, coordinating, and controlling information system security and privacy across all systems, devices, and communications platforms. Manage compliance with Federal information security and privacy requirements, including FISMA, the Computer Security Act, the Clinger-Cohen Act, and OMB Circular A-130. Develop and implement organization-wide plans and programs for IT security, including policies and procedures for threat and risk assessment, planning, risk management, training, program oversight, and evaluation. Serve as a focal point for IT security audits and evaluations and manage the enterprise-wide project plan for mitigating IT security vulnerabilities as required under FISMA. Coordinate regular testing of telecommunications networks and IT resources to ensure compliance with established security standards and practices. Provide expert advice to senior leadership, including the HHS CISO, program officials, and technical staff, and prepare briefings and recommendations on significant IT security issues. Plan, organize, and direct the activities of subordinate staff, ensuring IT programs comply with legal and regulatory requirements and meet operational needs.