IT Specialist (INFOSEC)

Summary

This position is located at Bureau of the Fiscal Service, Information Assurance Division. As an advanced IT Specialist (INFOSEC) Information System Security Officer (ISSO), you will serve as a principal advisor to the System Owner, Authorizing Official, and Chief Information Security Officer (CISO) on all matters (technical and otherwise) involving security of assigned systems that provide or support mission essential functions. .

Duties

• ***IMPORTANT*** This vacancy uses a two-phase application process. This is Phase 1 of 2 for this vacancy. To be considered for this position, you must complete both phases of the application process. Phase 1: You must first complete and submit your application under this announcement. Phase 2: After this announcement closes, eligible applicants will receive an email containing an exclusive link to a separate competency assessment announcement. You must use that link to complete and submit Phase 2. You must submit a résumé under both announcements, and both announcements must show Application Submitted for your application to be considered complete. You will receive application status updates only under the Phase 1 announcement. Additional instructions for completing the competency assessment will be provided in the Phase 2 announcement. Phase 2 is expected to take at least one hour to complete. Failure to complete and submit both Phase 1 and Phase 2 will result in an incomplete application and removal from further consideration. As an IT Specialist (INFOSEC), you will: Be responsible for all security RMF activities for the system(s) and/or service(s) they are appointed to throughout SDLC. Typical ISSO responsibilities include assisting in the development of the system security plan, ensuring compliance with that plan, and managing the security aspects and day-to-day security operations of the appointed information system(s) and/or service(s). These tasks may include but are not limited to, access management, auditing, configuration management, physical security, personnel security, incident handling, security training and awareness, and meeting Federal Risk and Authorization Management Program (FedRAMP) requirements (if applicable). Ensure that all data, privacy, records management, and other applicable requirements for the protection of sensitive and mission critical information (e.g., Controlled Unclassified Information - CUI, Personally Identifiable Information - PII, Federal Taxpayer Information - FTI, Payment Card Industry - PCI, etc.) within the assigned system(s) and/or service(s) are being met and followed. Ensure that individuals have read and signed the applicable agreements (e.g., Rules of Behavior - ROB, Non-Disclosure Agreements - NDA, etc.) and completed any required role-based training before accessing the assigned system(s) and/or service(s) and/or sensitive information.

Qualifications

You must meet the following requirements by the closing date of this announcement. The experience may have been gained in either the public, private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year and indicate number of hours worked per week on your résumé. For the GS-13, you must have one year of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized Experience for this position includes: Specialized Experience for the GS-13, you must have one year (full 52 weeks) of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized experience for this position includes: -Experience as an Information System Security Officer, or equivalent role, responsible for the security of systems, applications, or cloud services following the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) or comparable cybersecurity standards; AND -Experience maintaining security documentation, assessing security controls, tracking findings or vulnerabilities including the development and execution of remediation actions and/or risk mitigations or exceptions; AND -Experience coordinating with system owners, security personnel, cloud service providers, and technical teams on audits, assessment, incident response, configuration reviews, change reviews, or cloud security reviews. In addition to meeting specialized experience, individuals must meet proficiency levels in each of the following competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork, and Technical Competence. A competency assessment will be used to determine whether you meet the required competency proficiency levels. Once this announcement closes, eligible applicants will receive an email containing an exclusive link to access and complete Phase 2 of the application process. For the required proficiency levels and competency definitions, please see the following link: Competency-Based Qualification Standard for the Information Technology Management Series, 2210

Requirements

All newly appointed employees to the competitive (or excepted) service are subject to a probationary (or trial) period. During this time, your performance, conduct, and suitability for continued employment will be evaluated. You will not automatically convert to permanent status at the end of the probationary (or trial) period. Your supervisor must affirmatively determine that continued employment is in the best interest of the Federal service. If no certification is made before the probationary (or trial) period ends, your appointment will be terminated. You are encouraged to actively engage with your supervisor, seek feedback, and understand role expectations. Additional guidance and support will be provided during onboarding. Complete a Declaration for Federal Employment to determine your suitability for Federal employment, at the time requested by the agency. Have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer. If you are a male applicant born after December 31, 1959, certify that you have registered with the Selective Service System or are exempt from having to do so. Go through a Personal Identity Verification (PIV) process that requires two forms of identification from the Form I-9. Federal law requires verification of the identity and employment eligibility of all new hires in the U.S. Obtain and use a Government-issued charge card for business-related travel. File a Confidential Financial Disclosure Report within 30 days of appointment and annually from then on. This position requires that the successful candidate undergo personnel vetting, which includes a background investigation and enrollment upon onboarding into "Continuous Vetting." Enrollment in Continuous Vetting will result in automated record checks being conducted throughout one's employment with Treasury. The successful candidate will also be enrolled into FBI's Rap Back service, which will allow Treasury to receive notification from the FBI of criminal matters (e.g., arrests, charges, convictions) involving enrolled individuals in near real-time. For more information about individual rights, Noncriminal Justice Applicant's Privacy Rights - FBI, FD-258 Privacy Act Statement - FBI, and SEAD-3-Reporting-U.pdf (dni.gov). Key Requirements: Please refer to "Conditions of Employment." Click "Print Preview" to review the entire announcement before applying. Must be U.S. Citizen or U.S. National

How to apply

The following instructions outline our application process. You must complete this application process and submit any required documents by 11:59 p.m. Eastern Time (ET) on the closing date of this announcement. We are available to assist you during business hours (normally 8:00 a.m. - 5:00 p.m. ET, Monday - Friday). If applying online poses a hardship, please contact us by noon ET on the announcement's closing date. To preview the application questionnaire: https://apply.usastaffing.gov/ViewQuestionnaire/13040081. The application process is as follows: Click the Apply Online button. Answer the questions presented in the application and attach all necessary supporting documentation. Click Submit Application for the Phase 1 announcement before 11:59 p.m. Eastern Time on the announcement closing date. After the Phase 1 announcement closes, eligible applicants will receive an email containing an exclusive link to complete the competency assessment in Phase 2. Use the exclusive link to access the Phase 2 announcement. Click Apply and complete the five USAJOBS application steps to access the competency assessment questions. Complete the required competency questions and submit your Phase 2 application before the Phase 2 announcement closes. Your responses to the USA Hire Assessments will be reused for one year (in most cases) from the date you complete an assessment. If future applications you submit require completion of the same assessments, your responses will be automatically reused. Important: To complete the full application process, you must submit applications under BOTH announcements. You will only receive status updates in the first announcement. Once completed, both announcements should show the Application Status as Application Submitted. If you are required to complete USA Hire assessments, you will be notified after submitting your application. The notification will appear on your application submission screen and will also be sent by email. It will include your unique assessment access link and completion deadline. Access USA Hire using your unique assessment link. Access is granted through your USAJOBS login credentials. Review all instructions prior to beginning your assessments. You will have the opportunity to request a testing accommodation before beginning the assessments should you have a disability covered under the Rehabilitation Act of 1973 as amended. Set aside about two (2) hours to take the USA Hire Assessments; however, most applicants complete the assessments in less time. If you need to stop the assessments and continue later, you can re-use your unique assessment link. Your responses to the USA Hire Assessments will be reused for one year (in most cases) from the date you complete an assessment. If future applications you submit require completion of the same assessments, your responses will be automatically reused. For additional information on how to apply, please visit the Partnership for Public Service's Go Government website. Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments, based on your adjudication decision. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments if you received the link after the close of the announcement. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments. (https://appsupport-usastaffing.opm.gov/hc/en-us/sections/45063131363475-Reasonable-Accommodation-Information) The Fair Chance to Compete for Jobs Act prohibits the Department of Treasury and its bureaus from requesting an applicant's criminal history record before that individual receives a conditional offer of employment. In accordance with 5 U.S. Code § 9202(c) and 5 C.F.R § 920.201 certain positions are exempt from the provisions of the Fair Chance to Compete Act. Applicants who believe they have been subjected to a violation of the Fair Chance to Compete for Jobs Act, may submit a written complaint to the Department of Treasury by email at, [email protected]. To learn more, please visit our page at: Treasury.gov/fairchanceact.gov