This position is located in the Office of the Chief Information Security Officer (OCISO), Cyber Risk Management Section, within the Chief Information Officer Organization (CIOO) of the FDIC and is responsible for leading and managing information security for assigned systems, and including the isolation and defining of unprecedented conditions, resolving critical problems, and the developing, testing, and implementing of new technologies.

Duties

Responsible for leading and managing information security for assigned systems, including third party systems that are hosted and operated by another agency, contractor, or other sources. Serves as the primary liaison to internal and external stakeholders on the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) implementation, the incumbent will guide system owners and IT project teams with integrating the RMF implementation into system development life cycle activities, and support project teams with designing and implementing security controls. Develops and maintains the security categorization of systems and subsystems, and direct team of Information Systems Security Officers (ISSOs) in the execution of system security activities. Works with multiple teams and technical leaders to align them on a common vision and ensure security risks are understood and prioritized correctly. Leads, tracks, and reports on assigned projects. Communicates complex technical requirements to non- technical personnel. Prepares and presents briefings to senior management officials on complex/controversial issues. Provides recommendations to improve the effectiveness of processes and programs, and for improving overall security posture. Participates in planning and estimation exercises.

Requirements

Qualifications

Qualifying experience may be obtained in the private or public sector. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g. Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic, religious spiritual; community; student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.  Additional qualifications information can be found here.   To qualify, applicants must have completed at least one year of specialized experience equivalent to at least the grade level 13 or above in the Federal service.  Specialized experience is defined as: experience leading NIST Risk Management Framework activities supporting the planning, design, implementation, assessment, operation, and management of system security controls for complex information technology solutions, including cloud and other third-party hosted solutions.  You must have Information Technology (IT)-related experience which demonstrates proficiency in each of the following competencies: • Attention to Detail - Is thorough when performing work and conscientious about attending to detail. • Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. • Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. • Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Education

There is no substitution of education for the experience for this position.

Contacts

• Address Federal Deposit Insurance Corporation FDIC Human Resources Branch 300 S. Riverside Plaza Suite 1700 Chicago, Illinois 60606 United States
• Name: Carlos Soria
• Phone: 312-382-6889
• Email: [email protected]