IT Specialist (Infosec)

Duties
Help

• Serve as an Information Systems Security Manager (ISSM).
• Provide guidance to Information System Owners (ISO) and Program/System Managers (PM/SM).
• Evaluate and provide cybersecurity guidance and assessment on system development lifecycle efforts.
• Serve as a principal advisor on all matters, technical and otherwise, involving the cybersecurity of an information system.
• Establish guidance and implement a multi-tiered cybersecurity risk management process to protect information and systems.
• Advise the Security Control Assessor and Chief Information Security Officer (CISO) on adequacy of RMF controls within each RMF Package.
• Serve as Subject Matter Expert and provide direct customer support through the assessment and authorization process of the Risk Management Framework.

Requirements
Help
Conditions of employment

• Must be a U.S. citizen.
• Security Requirements: Non-Critical Sensitive with Secret Access.
• Appointment is subject to the completion of a favorable suitability or fitness determination, where reciprocity cannot be applied; unfavorably adjudicated background checks will be grounds for removal.
• Selective Service Requirement: Males born after 12-31-59 must be registered or exempt from Selective Service.
• Subject to pre-employment drug testing and periodic drug testing thereafter.

Qualifications

To qualify for an IT SPECIALIST (INFOSEC), your resume and supporting documentation must support:

A. Specialized Experience: One year of specialized experience that equipped you with the particular competencies to
successfully perform the duties of the position and is directly in or related to this position. To qualify at the GS-13
level, applicants must possess one year of specialized experience equivalent to the GS-12 level or equivalent under
other pay systems in the Federal service, military or private sector. Applicants must meet eligibility requirements
including time-in-grade (General Schedule (GS) positions only), time-after-competitive appointment, minimum
qualifications, and any other regulatory requirements by the cut-off/closing date of the announcement. Creditable
specialized experience includes:

• Understanding Risk Management Framework (RMF), including the use of GRC tools like eMASS.
• Familiarity with security audits, STIGs, vulnerabilities, and remediation efforts.
• Evaluate and implement security controls in complex system environments.
• In-depth knowledge of DoD cybersecurity regulations and policies.

For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or
products that your work unit produces, including the general public, individuals who work in the agency, other
agencies, or organizations outside the Government) to assess their needs, provide information or assistance,
resolve their problems, or satisfy their expectations; knows about available products and services; is committed
to providing quality products and services.

3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively,
taking into account the audience and nature of the information (for example, technical, sensitive, controversial);
makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds
appropriately.

4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment
to generate and evaluate alternatives, and to make recommendations.

Education

Substitution of education may not be used in lieu of specialized experience for this grade level.

Additional information

• This position does not meet criteria for appointment of Reemployed Annuitants. The DoD criteria for hiring Reemployed Annuitants can be found at: https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/140025/1400.25-V300.pdf
• Tour of Duty: Schedule/Flexible
• FLSA:Exempt
• Bargaining Unit: No
• Selectee may be required to serve a trial/probationary period.
• Acquisition, Technology & Logistics (AT&L) NON-CAP: Position requires DoD Acquisition Engineering and Technical Management, Foundational certification within required timeframes. Selectee must also achieve 80 hours of Continuous Learning Points (CLPs) every 2-years. Click here for more details and Resources .