DIRECT HIRE AUTHORITY: This position is being filled through the office of Personnel Management's (OPM) Government-Wide Direct-Hire Authority for this occupation and is open to all U.S. Citizens. Since the Direct-Hire Recruitment Authority is being used, traditional Veterans' Preference rules do not apply. Qualified Veterans will, however, be given full consideration for this position.

Duties

This vacancy is limited to the first 100 applications received and will close at midnight Eastern Time on the day this application limit is reached regardless of the closing date specified in this vacancy announcement. Any application received prior to midnight Eastern Time of the day the application limit is reached will be accepted and considered. You are strongly encouraged to submit all required supporting documents at the time of application should the vacancy close earlier than stated in this announcement due to the applicant limit being reached. Supporting documents will not be accepted once the vacancy announcement closes. This position is being advertised as both location negotiable after selection and with a duty station(s) of Lakewood, CO and Reston, VA with the option of telework. If applying to "negotiable after selection", this means that your duty station will be based off your home address and you will be a full-time remote worker. If applying to a specific duty station, you may be allowed to telework a set number of day(s) per pay period, with supervisory approval. At the full performance level (GS-13) the major duties of this position include but are not limited to the following: 1. Conduct or support external audits as a subject matter expert external and internal control reviews in support of audits or assessments and manage findings using appropriate tracking systems and procedures. 2. Develop and implement procedures and processes to document, test, and maintain the IT and Internal control environment using the SAP Process Control tool. 3. Participate in deployment and ongoing support of new security tools into the existing FBMS SAP security environment. 4. Participate in projects or initiatives as a subject matter expert in the area of application security or information assurance , as directed, in an Agile Project Management program and communicate status of assigned tasks to the Security Technical Lead and Branch Chief. 5. Ensure the on-going compliance of FBMS from an application security perspective. Perform technical security tasks, manage change requests by leveraging SAP's Change Request Management (ChaRM) module, utilize SAP's Focused Build management tool, maintain security or information assurance documentation and ensure all work performed meets statutory and regulatory requirements, and complies with federal government and departmental policy. Perform quality assurance checks to ensure security requirements are implemented appropriately in all environments. 6. Provide guidance or direction over the Application Security or Information Assurance Sections by setting section priorities and assigning tasks and responsibilities to staff, and mentoring junior members. Salary Range Information: GS-12 Remote: $82, 830 (step 1) to $107,680 (step 10) (Rest of US Pay Scale) GS-12 Lakewood, CO: $91,753 (step 1) to $119,280 (step 10) GS-12 Reston, VA: $94,199 (step 1) to $122,459 (step 10) GS-13 Remote: $98,496 (step 1) to $128,043 (step 10) (Rest of US Pay Scale) GS-13 Lakewood, CO: $109,107 (step 1) to $141,836 (step 10) GS-13 Reston, VA: $112,015 (step 1) to $145,617 (step 10) First time hires to the federal government typically start at the beginning salary in the range for their respective grade level. If applying for remote work, your salary will be based off of your specific location. To see the pay table for your location, please go to the following link: https://www.opm.gov/policy-data-oversight/pay-leave/salaries-wages/2023/general-schedule/ This vacancy may be used to fill additional positions as vacancies become available.

Requirements

Qualifications

To qualify for this position you must meet the (1) Minimum Qualification Requirement AND (2) Specialized Experience for the grade to which you are applying. (1) Minimum Qualification Requirements: Applicants must have IT-related experience demonstrating each of the four competencies listed below. Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND (2) Specialized Experience: GS-12: To qualify for the GS-12, you must possess at least one full year of specialized experience equivalent to at least the GS-11 grade level in the Federal service, or comparable experience not gained through Federal service. Specialized experience is experience that equipped the applicant with the particular knowledge, skills, and abilities to perform successfully the duties of the position, and that is typically in or related to the work of the position to be filled. Specialized experience is defined as demonstrated experience: MUST MEET ALL THREE 1.) Applying IT application security and cybersecurity principles, methods, and practices to include technical documentation, and analytical methods sufficient to identify and resolve issues related to access management, provides assistance to application users, and ensure the continued operations of the security tools and processes. 2.) Support implementing information assurance or application security policies and procedures in the development and operation of an SAP ERP system, with an emphasis on the Governance, Risk, and Compliance (GRC) system. 3.) Participating in projects related to application security or information assurance in an Agile Project Management program. GS-13: To qualify for the GS-13, you must possess at least one full year of specialized experience equivalent to at least the GS-12 grade level in the Federal service, or comparable experience not gained through Federal service. Specialized experience is experience that equipped the applicant with the particular knowledge, skills, and abilities to perform successfully the duties of the position, and that is typically in or related to the work of the position to be filled. Specialized experience is defined as demonstrated experience: MUST MEET ALL FIVE 1.) Applying IT application security and cybersecurity principles, methods, and practices to include technical documentation, and analytical methods sufficient to identify and resolve issues related to access management, provides assistance to application users, and ensure the continued operations of the security tools and processes. 2.) Providing advice and guidance implementing information assurance or application security policies and procedures in the development and operation of an SAP ERP system, with an emphasis on the Governance, Risk, and Compliance (GRC) system. 3.) Independently completing projects related to application security or information assurance in an Agile Project Management program. 4.) Performing as a subject matter expert on SAP security for audit inquiries. 5.) Managing and mitigating risks and controls related to the use, processing, storage, and transmission of SAP ERP data and the processes using SAPs Governance Risk and Compliance (GRC) tools. Additional information on the qualification requirements is outlined in the OPM Qualification Standards Handbook of General Schedule Positions and is available at OPM's website: https://www.opm.gov/qualifications/standards/indexes/num-ndx.asp All qualification requirements must be met by the closing date of this announcement.

Education

This job does not have an education qualification requirement.

Contacts

• Address Office of the Secretary 45600 Woodland Road Sterling, VA 20166 US
• Name: Lindsey Sakakibara
• Phone: 703-787-1843
• Email: [email protected]