INFORMATION SYSTEMS SECURITY OFFICER (ISSO) GS-2210-14 FPL GS-14 (DH)

Summary

Duties

APPLICATION LIMIT: This vacancy announcement is limited to the first 200 applications received and will close at 11:59PM Eastern Time on the day that we receive the 200th application, or at 11:59PM Eastern Time on the listed closing date, whichever occurs first.

We encourage you to read this entire vacancy announcement prior to submitting your application. As a an Information System Security Officer (ISSO GS-2210-14, you will be responsible for:

• Overseeing the implementation of information technology (IT) security controls and security authorization documents and ensure the system is compliant with mandated security policies and requirements.
• Providing technical recommendations and security analysis for each system ensuring appropriate security measures are in place, being enforced and generate plans of action and milestones (POA&Ms) for vulnerabilities identified during the risk assessments, audits, inspections and manage POAM's to closure.
• Recognizing a possible security violation and takes appropriate action to report the incident as required.
• Supporting necessary compliance activities, e.g., ensures that system security configuration guidelines are followed and compliance monitoring occurs.
• Continuously validating the organization against policies/ guidelines/ procedures/regulations/ laws to ensure compliance and where necessary defines and/or implements policies and procedures to ensure protection of said systems.

Requirements

Conditions of employment

The U.S. Department of Education (ED) has interagency agreements (IAAs) with other agencies to ensure efficient delivery of funded programs and activities and move closer to fulfilling the President's promise to return education to the states. Employees may receive detail assignments to these agencies in support of the IAAs.

Condition of Employment:
As a condition of employment for accepting this position, you may be required to serve a probationary period or trial period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: - your performance and conduct; - the needs and interests of the agency; - whether your continued employment would advance organizational goals of the agency or the Government; and - whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period OR trial period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.

Qualifications

You must meet all qualification requirements within 30 days of the closing date of this vacancy announcement.

If you are a current federal employee, you must meet all time-in-grade and time-after competitive appointment qualifications within 30 days of the closing date of this vacancy announcement. To verify that you meet these requirements, we will review your responses to the core eligibility questions on the occupational questionnaire, as well as your submitted resume and required documents. To make an accurate determination, you will need to include on your resume your federal position title, pay plan, occupational series, grade level, agency, dates for which you held the grade level (stated as MM/YYYY to MM/YYYY, OR MM/YYYY to PRESENT), and total hours worked per week. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social).

Minimum Qualification Requirements

You may meet the minimum qualifications for the GS-14, if you possess the specialize experience, education, or a combination of the two.
Specialized Experience for the GS-14 One year of experience in either federal or non-federal service that is equivalent to at least a GS-13 performing two (2) out of three (3) of the following duties or work assignments:

1. Experience supporting risk assessment efforts during Security Assessment and Authorization processes resulting in systems successfully attaining an Authority to Operate(ATO).
2.Experience with vulnerabilities identified through risk assessments, audits, and inspections and that Plans of Actions and Milestones (POA&Ms) are created and processed in a timely manner and remediation plans are in place for those identified vulnerabilities.
3. Experience supporting successful implementation and functionality of security requirements and information technology (IT) policies and procedures consistent with an organization's mission and goals for authorized systems and continued authorization of same.

Basic Experience Requirements Example (IT Specialist GS-12 and Above GS or Equivalent):
For positions at the GS-12, GS-13, GS-14, or GS-15 grade levels, applicants may qualify by meeting or exceeding the minimum proficiency level established for each of the required competencies, in addition to meeting the specialized experience requirement as demonstrated through the assessment of skills. You must possess IT-related experience (paid or unpaid experience and/or completion of specific, intensive training (e.g., IT certification), as appropriate) demonstrating each of the nine competencies listed below.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (i.e., any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change. 4. Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems. 5. Interpersonal Skills- Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations. 6. Oral Communication- Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 7. Problem Solving- Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. 8. Teamwork- Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals. 9. Technical Competence- Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues

Knowledge, Skills, and Abilities (KSAs) The quality of your experience will be measured by the extent to which you possess the following knowledge, skills and abilities (KSAs). You do not need to provide separate narrative responses to these KSAs, as they will be measured by your responses to the occupational questionnaire (you may preview the occupational questionnaire by clicking the link at the end of the Evaluations section of this vacancy announcement).

1. Knowledge of risk management processes (e.g., methods for assessing and mitigating risks).
2. Knowledge of cybersecurity and privacy principles; cyberthreats and vulnerabilities; impacts of cybersecurity lapses; encryption algorithms; and applicable business processes of operations of customer organization..
3. Knowledge of vulnerability information dissemination sources [e.g. alerts, advisories, errata and bulletins]; incident response and handling methodologies; and industry standard and organizationally-accepted analysis principles and methods.
4. Ability to integrate information security requirements into the acquisition process using applicable baseline security controls as one of the sources for security requirements; ensuring a robust software quality control process; and, establishing multiple sources (e.g., delivery routes for critical system elements).
5. Skill in researching, choosing, interpreting, modifying, and applying available guidelines for adaptation to specific problem or issues.