SUPERVISORY IT CYBERSECURITY SPECIALIST(INFOSEC)

Duties

This position is located in a National Guard JFHQ-State organization under the office of the Chief Information Officer(CIO/G6/J6). Serves as the Network Enclave Information Systems Security Manager (ISSM) responsible for managing a total infrastructure protection environment; system
security certification and accreditation requirements and processes; as well as Federal information systems protocols.

MAJOR DUTIES:
1. Serves as the principle advisor to the CIO and the respective staff on the latest industry and technological projections as they pertain to Cyber Security/Information Security for the network enclave infrastructure. Develops policies for organization deployed throughout the headquarters. Must anticipate the effects of new emerging technology and develop policies to control it to prevent security violations. Duties include oversight of ATCTS and accreditation of all systems IAW with all command, Army, JS and DOD security directives, policies and procedures. Ensures that all elements are in compliance with guidance concerning accreditation of automated information systems, risk management, control of computer viruses, and other similar issues. Ensures that a wide variety of security incidents are investigated and reported IAW with all command, Army, NGB and DOD security directives, policies and procedures to include: computer viruses and sanitation of highly classified information from organization.

2. Provides executive leadership, guidance, and direction to ensure acquisition, development, and retention of a professional, highly capable workforce to accomplish assigned missions. Provides supervision in the daily operations for security activities for the enclave. Coordinates the work of team members to ensure that short-term and long-term goals and objectives are met. Directs, manages, and monitors a system of internal controls that ensure effective and appropriate use of resources.

3. Establishes performance standards and evaluates employee performance. Reviews and recommends approval of, candidates for promotions and recognition. Reviews and approves: work plans to be accomplished by subordinates; priorities and schedules for completion of work; sets broad objectives; monitors subordinate employees' performance in providing IT services; reviews accomplishments; and takes appropriate action of correction when deficiencies are noted. Gives advice, counsels, or instructs individual employees, on both work and administrative matters. Develops and evaluates performance standards; recommends and approves awards; hears and resolves group employee grievances or serious employee complaints. Reviews and makes decisions on serious disciplinary actions involving employees and makes decisions on work problems presented by subordinates. Initiates recognition and disciplinary actions for personnel. Identifies and arranges for appropriate training and development opportunities. Determines and approves training needs and establishes formal training plans.

4. ISSM responsibilities include (taken from DoDI 8500.01 and 8510.01):
A. Support implementation of the RMF. Maintain and report IS and PIT systems assessment and authorization status and issues in accordance with DoD Component guidance. Provide direction to the ISSO in accordance with DoD, Army and NGB directives. Coordinate with the organization's cybersecurity service provider to ensure issues affecting the organization's overall security are addressed appropriately. Maintain a repository for all organizational or system-level Cybersecurity-related documentation. Ensure that ISSOs are appointed in writing and provide oversight to ensure they are following established Cybersecurity policies and procedures.
B. Monitor compliance with cybersecurity policy, as appropriate, and review the results of such monitoring. Ensure that Cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations. Ensure implementation of IS security measures and procedures including reporting incidents to the AO and appropriate reporting chains and coordinating system-level responses to unauthorized disclosures in accordance with DoD, Army, and NGB guidelines. Ensure handling of possible or actual data spills of classified information resident in ISs, are conducted in accordance with applicable guidelines.
C. Act as the primary cybersecurity technical advisor to the AO for DoD IS and PIT systems under their purview. Ensure that Cybersecurity-related events or configuration changes that may impact DoD IS and PIT systems authorization or security posture are formally reported to the AO and other affected parties, such as IOs and stewards and AOs of interconnected DoD ISs.

**REFER TO PD FOR FULL LIST OF DUTIES/RESPONSIBILITIES**

Requirements

Conditions of employment

• The incumbent of this position description must have, at a minimum, a completed National Agency Check (NAC) prior to position assignment.
• Irregular and overtime (compensatory) hours may be required to support operational requirements or contingencies.
• The employee may be required to travel in military and/or commercial aircraft to perform temporary duty assignments.
• Males born after 31 December 1959 must be registered for Selective Service.
• Federal employment suitability as determined by a background investigation.
• May be required to successfully complete a probationary period.
• Participation in direct deposit is mandatory.
• Work may require access to classified information. Must be able to obtain and maintain the appropriate security clearance.
• May occasionally be required to work other than normal duty hours; overtime may be required.

Qualifications

OPEN AREAS OF CONSIDERATION: AREA 1, 2, 3
Area I: Current On-board Title 5 or Title 32 Dual Status Technicians (Tenure: 1-Career, 2-Conditional, 3-Indefinite or 4-Term ) - Only those current Vermont National Guard employees who are in permanent, indefinite, or term technician status as result of being competitively hired by the Vermont National Guard.
Area II: All current Federal Employees from any agency.
Area III: All current and former members of the VTNG.

MINIMUM REQUIREMENTS : Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate.
For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled.

Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

SPECIALIZED EXPERIENCE: 36 months experience, with 1-year specialized experience equivalent to at least the next lower grade. Specialized experience includes experience, education, or training that approaches techniques and requirements appropriate to an assigned computer applications area or computer specialty area in an organization. Experience planning the sequence of actions necessary to accomplish the assignment where this entailed coordination with others outside the organizational unit and development of project controls. Experience that required adaptations of guidelines or precedents to meet the needs of the assignment. Experience preparing documentation on cost/benefit studies where is involved summarizing the material and organizing it in a logical fashion. Experience in managing the function of the work to be performed. Experience which includes leading, directing and assigning work of personnel.

NOTE: This information must be supported in your resume to be considered for the position

OR

Education: A Ph.D or equivalent doctoral degree OR 3 full years of progressively higher level graduate education leading to such Ph.D. or equivalent doctoral degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or a degree that provided a minimum of 24 semester hours in one of more of the identified above fields identified above and required the development or adaptation of applications, systems or networks. Note: You must submit copies of your official transcripts.

Length of time is not of itself qualifying. Candidates' experience should be evaluated based on the duties performed rather than strictly on the rank of the individual; however, established compatibility criteria/assignments must be followed. The applicant's record of experience, training, and education must show possession of the knowledge, skills, and abilities needed to fully perform the duties of the position.

PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

CONTINUATION OF CONDITIONS EMPLOYMENT & NOTES:
1. Must obtain and maintain a SECRET clearance level.

2. Incumbent must complete appropriate training and obtain required certifications IAW DoDI8140, DOD 8570.01M or applicable governing document(s) for Cyber workforce as an IA Manager Level 3.

3. All certifications are required within 9 months of employment.

4. Position is designated as OM-ADM-001 within the Defense Cybersecurity Workforce as guided by NIST SP 800-181; National Initiative for Cybersecurity Education, Cybersecurity Workforce Framework. Which establishes the Tasks, Skills, Knowledge and Abilities expected of this
position. (https://www.nist.gov/itl/applied-cybersecurity/nice/nice-framework-resource-center).

5. This position is designated as Essential Personnel and may be subject to duty in preparation for, or in response to, a state emergency or disaster declaration. This designation will not exceed 14 calendar days per year unless otherwise approved in advance by the TAG.

Please be advised:
1. Specialized experience will be used to determine qualifications for the announced position.
2. An applicant's RESUME must provide, in detail, how they meet the specialized experience listed.
3. It must be documented with "from (mm/yy)" and "to (mm/yy)" dates and description of the specialized experience.
4. If education or a degree is required as part of the "Specialized Experience", you must include transcripts.

Do not copy the specialized experience qualifications word for word and place into your resume; you must describe your personal experience as it pertains to each statement.

Education

Substitution of Education for Specialized Experience is allowed.

1) Qualifying based on education alone: Education may be substituted for specialized experience with a Ph.D or equivalent doctoral degree OR 3 full years of progressively higher level graduate education leading to such Ph.D. or equivalent doctoral degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or a degree that provided a minimum of 24 semester hours in one of more of the identified above fields identified above and required the development or adaptation of applications, systems or networks. NOTE: In order to qualify for this position using education, you must submit a copy of your transcripts.

FOREIGN EDUCATION: If you are using education completed in foreign colleges or universities to meet the qualification requirements, you must show the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs and such education has been deemed equivalent to that gained in an accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university. For further information, visit: .

Additional information

If you are a male applicant who was born after 12/31/1959 and are required to register under the Military Selective Service Act, the Defense Authorization Act of 1986 requires that you be registered or you are not eligible for appointment in this agency ( ).

If you are currently serving on active duty and expect to be released or discharged within 120 days you must submit documentation related to your active duty service which reflects the dates of service, character of service (honorable, general, etc.), and dates of impending separation.