Information Security Manager (INFOSEC)

Summary

This position is located in Division of Risk Management Supervision (RMS) and serves as the primary subject matter and technical expert in information security, responsible for managing the development and implementation of RMS's information security and privacy programs. Additional selections may be made from this announcement to fill identical vacancies that arise later.

Duties

• Develops and implements RMS's security and privacy policies and procedures related to RMS systems and processes. Manages the day-to-day operations of RMS's IT projects with respect to security and privacy requirements and documentation. Oversees RMS's compliance with corporate directives related to information security and privacy protection, and internal security memoranda and practices related to bank supervision. Collaborates with all RMS staff, other FDIC divisions, and external agencies on system access, security, and privacy matters, including sensitive issues with Division-wide implications. Implements business-specific security and privacy practices as directed by OCISO management and maintains communication with OCISO to ensure a continuous feedback loop. Serves as the point of contact for divisional data-loss incidents and data breaches; tracks and reports suspected information security violations to the Security Response Team and coordinates corrective actions with OCISO and RMS staff. Assesses FDIC technology posture, broader IT industry trends, and legislative and oversight actions to recommend program changes or new initiatives within the Division. Develops and delivers presentations and guidance to improve user understanding of security and privacy requirements and promote adherence to corporate and Division policies.

Qualifications

Qualifying experience is credited from private and public sectors, including paid and unpaid service (e.g., Peace Corps, AmeriCorps). Volunteer service builds competencies that translate to paid work. You will receive credit for all qualifying experience. See OPM's General Schedule Qualification Standards for details. CG-14: Applicants must complete one year of specialized experience equivalent to the CG-13 level or above in Federal service. Specialized experience is defined as: Collaborating with cybersecurity leadership on enterprise level security strategy, impact assessments, and risk management activities; Contributes to the development, implementation, and maintenance of information security and privacy policies, procedures, and controls within an enterprise environment; AND Conducts day to day security operations for IT systems or projects, including system access oversight, documentation, incident reporting, and/or coordination with cross functional teams. Applicants must have met the qualification requirements within 30 calendar days of the closing date. Interagency Career Transition Assistance Program (ICTAP) eligible applicants must earn 85 or higher on the online assessment to be determined "well qualified." Resume Content Required for Qualification Determinations For each position on your resume, include: Employer name; Title; Series and grade (federal jobs only); Start and end dates (month/year); Hours per week; Relevant experience supporting your specialized experience responses. Important: If your resume is missing these details, your application may be marked incomplete, and you might not be considered for this job. Do not copy/paste duties or specialized experience from this announcement into your resume; that will not be considered a demonstration of your qualifications.

Education

There is no substitution of education for experience for this position.

How to apply

To begin, click the "Apply" button and follow the prompts. If you haven't already, register and establish a USAJOBS account. After you register online, click the "Apply" button to complete the online assessment questionnaire, and submit all required documents. Please be sure to click "Submit Application" to complete the application process. You must apply online. To return to your saved application, log in to your USAJOBS account and click on "Applications" tab. Click on the "Position Title," and then select "Update Application" or "Additional Application Information" to continue. You have until 11:59 p.m. ET (Eastern Time) on the closing date (09/17/2026) of this announcement to complete the application process. Please ensure you have completed the application process by verifying the status of your application on-line to reflect: "Received". Failure to complete the application process will result in an incomplete application and you will not be considered for the position. If you are required to complete any USA Hire Assessments, you will be notified after submitting your application. The notification will be provided in your application submission screen and via email. The notification will include your unique assessment access link to the USA Hire system and the completion deadline. Additionally, in USAJOBS you can click "Track this application" to return to your assessment completion notice. Access USA Hire using your unique assessment link. Access is granted through your USAJOBS login credentials. Review all instructions prior to beginning your assessments. You will have the opportunity to request a testing accommodation before beginning the assessments should you have a disability covered under the Rehabilitation Act of 1973 as amended. Set aside at least 3 hours to take the USA Hire Assessments; however, most applicants complete the assessments in less time. If you need to stop the assessments and continue later, you can re-use your unique assessment link. Your responses to the USA Hire Assessments will be reused for one year (in most cases) from the date you complete an assessment. If future applications you submit require completion of the same assessments, your responses will be automatically reused.