Chief Information Security Officer (CISO)

Summary We are seeking a highly qualified and motivated individual to serve as the Chief Information Security Officer (CISO) and be a proactive member of our team.  Location of position: GSA Office of Inspector General 1800 F Street NW Washington, D.C. 20405 We are currently filling one vacancy, but additional vacancies may be filled as needed. Duties The Office of Inspector General (OIG) for the General Services Administration (GSA) is one of the original OIGs established by the Inspector General Act of 1978. The OIGs were created as independent and objective entities within an agency to (a) promote economy, efficiency, and effectiveness in the administration of the agency, and (b) to prevent and detect fraud and abuse in agency programs and operations. The OIGs report to the agency head and Congress through semi-annual and other reports. The GSA OIG operates as an autonomous entity within GSA under a presidentially appointed, Senate confirmed Inspector General who supervises a diverse team of approximately 300 professionals in headquarters' administrative, legal, and operational components and in regional operational offices throughout the country. The GSA OIG is dedicated to protecting the public interest by bringing about positive changes in the performance, accountability, and integrity of GSA programs and operations. Oversight is provided through auditing, inspections and evaluations, and investigations of GSA extensive procurement, real property, and related programs and operations, which primarily support other federal agencies. OIG oversight components report their findings and recommend courses of action to promote efficiency and economy in the GSA’s activities. Applicants are encouraged to review the work and accomplishments of the GSA OIG on our website, https://www.gsaig.gov/. The incumbent of this position serves as a Chief Information Security Officer (CISO) and has superior knowledge and skills in the areas of Systems/Network Engineering and Administration and Network/Information Security. This position is located in the Office of Inspector General (OIG), Office of Administration, Information Technology Division (JPM). The incumbent serves as the Chief Information Security Officer (CISO) and is an IT security expert. This position is classified as a Supervisory IT Specialist (Security), and as such, the incumbent supervises the IT security team and assists in the interpretation, implementation, establishment and adherence of all policies related to the Division. The incumbent reports directly to the OIG Chief Information Officer (CIO). The major responsibilities of this position include:  Providing technical and authoritative advice on IT security to support staff and communicates to individual team members their assignments, projects, and/or problems to be solved; actionable events, milestones, and/or program issues under review; and, deadlines and timeframes for completion; Participating with the CIO in defining, implementing and structuring security requirements; Establishing and enforcing security parameters for agency wide adoption and use of Artificial Intelligence (AI); Assessing and mitigating security incidents and enforcing protocols to prevent malicious activity from occurring and ensuring business continuity during security incidents; Conducting Authority to Operate (ATO) reviews for the CIO to sign; Enforcing security standards for the entire agency Attending strategies and meetings and providing input on policies, processes and procedures; Monitoring the status and progress of work assignments to ensure that deadlines and schedules are met; Representing the Division in meetings for the purpose of obtaining resources (i.e. computer hardware and software, and other IT equipment required for securing the OIG’s infrastructure, travel budget), and securing needed information or decisions from the Director on major work problems and issues that arise; Conducting regular reoccurring IT security project status meetings with stakeholders; and, Developing, maintaining, and forecasting the budget for the IT Security team – to include all expenses related to compensatory time, travel, training needs for future projects, etc. Requirements Conditions of employment US Citizenship or National (Residents of American Samoa and Swains Island) Meet all eligibility requirements within 30 days of the closing date. Register with Selective Service if you are a male born after 12/31/1959 If selected, you must meet the following conditions: Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C or Non­Career SES employee in the Executive Branch, you must disclose this information to the HR Office. Failure to disclose this information could result in disciplinary action including removal from Federal Service. Serve a one year probationary period, if required. Undergo and pass a background investigation (Tier 5 investigation level).  Have your identity and work status eligibility verified if you are not a GSA OIG employee.  We will use the Department of Homeland Security’s e-Verify system for this. Any discrepancies must be resolved as a condition of continued employment. Complete a financial disclosure report to verify that no conflict, or an appearance of conflict, exists between your financial interest and this position. Serve a one year supervisory or managerial probationary period, if required Participate in the Continuity of Operations Plan (COOP), which includes attending meetings and planning activities; and carrying out mission-critical work at a designated location other than your primary work site (which may be outside of your commuting area). Qualifications The GS-14 salary range starts at $143,913 per year. If you are a new federal employee, your starting salary will likely be set at the Step 1 of the grade for which you are selected.   To qualify, you must meet the following requirements: Have IT-related experience demonstrating EACH of the four IT Specialist competencies AND one year of specialized experience equivalent to the GS-13 level in the Federal service as described below: IT SPECIALIST COMPETENCY REQUIREMENTS: Attention to Detail - This skill is generally demonstrated by assignments where the applicant keeps abreast of latest technology, information, research, etc., to maintain knowledge in the field of IT security (for example, reads trade journals, participates in professional/technical associations, maintains credentials). Customer Service - This skill is generally demonstrated by assignments where the applicant promotes or develops and maintains good working relationships with key individuals or groups. Oral Communication - This skill is generally demonstrated by assignments where the applicant serves on panels, committees, or task forces as a representative for the organization on issues pertaining to IT security. Problem Solving - This skill is generally demonstrated by assignments where the applicant monitors current trends or events in order to assess organizational needs and formulate solutions to complex IT security issues. SPECIALIZED EXPERIENCE REQUIREMENTS: Specialized experience is: Leading teams and/or supervising others in work relating to systems engineering with Windows servers, Storage Area Networking, Virtualization, Routing and Switching, Databases, Firewalls, and Virtual Private Networking. Providing expert technical advice, guidance, and recommendations to management and other technical specialists on critical IT issues - including information security. Experience with Zero Trust Architecture (ZTA) Experience with research, validation, and approval of Large Language Models (LLMs) - and other AI models - for use within an organization. Applying security requirements such as the Federal Information Security Management Act of 2002 (FISMA), Federal Risk and Authorization Management Program (FedRAMP), NIST 800-53, and other applicable federal requirements for assessment, authorization, and continuous monitoring. Interpreting and applying policies, procedures, and strategies that govern the planning and delivery of IT services. Managing network scans, log reviews, IDS configurations, and AV/Malware flags Experience with security analysis toolsets, information security concepts, principles and practices Configuring and managing firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices at an enterprise level. It is preferred that you have: a security-based certification such as CISM (ISACA), CISA(ISACA),CISSP(ISC2), CEH (EC-Council), GAIC (Sans), Security+ (CompTIA) or other comparable certification. Please list any/all certifications in your resume and be prepared to describe how they are comparable/relevant to those listed above and/or the position being sought. Education This job does not have an education qualification requirement. Additional information Candidates will not be hired based on their race, sex, color, religion, or national origin. Applicants are encouraged to make their resume searchable in their USAJOBS.gov profile. This will allow Federal hiring specialists and hiring managers across agencies to find their resume as part of agency recruitment campaigns or staffing searches. Current civil service employees will receive new appointments if selected under this Direct Hire Authority. If you apply to this position and are selected, we will not ask about your criminal history before you receive a conditional job offer. If you believe you were asked about your criminal history improperly, contact the OIG HR point of contact listed on this vacancy announcement. Relocation-related expenses are not approved and will be your responsibility.   In the event that this position cannot be filled by the initial selection, alternate selections may be made from this announcement. Management also has the right to not fill this position or to fill additional vacancies through this announcement as needed. Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Benefits A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits. You will have access to many benefits including: Health insurance (choose from a wide range of plans) Life insurance coverage with several options Sick leave and vacation time, including 11 paid holidays per year Thrift Savings Plan (similar to a 401(k) plan) Flexible work schedules Transit and child care subsidies Flexible spending accounts Training and development Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.