This position is located in the Department of Health and Human Services, Office of the Secretary of Health and Human Services, Office of the Assistant Secretary for Financial Resources (ASFR), Office of Finance, Office of Financial Systems Policy and Oversight, located in Washington, District of Columbia.

Duties

The IT Specialist (INFOSEC) performs the following duties: Provides authoritative guidance to the Office of Financial Systems Policy and Oversight (OFSPO) in developing and implementing financial systems security policy and internal controls based on federal cyber security regulations and provide expert recommendations to senior management on IT security best practices, emerging threats, and strategic initiatives. Leads security compliance implementation and monitoring activities relating to systems Authority to Operate (ATO), MOUs and the associated Interconnection Security Agreements (ISAs), information system audits (ex. such as FISCAM/FISMA), and delivers audit artifacts such as system security plans, risk assessments, and contingency plans. Plans, develops, and monitors a variety of advisory security services related to internal controls, risk management, IT controls and related standards.

Requirements

Qualifications

Your resume must include detailed information as it relates to the responsibilities and specialized experience for this position. Evidence of copying and pasting directly from the vacancy announcement without clearly documenting supplemental information to describe your experience will result in an ineligible rating. This will prevent you from receiving further consideration. Applicants must demonstrate that they meet the basic and specialized experience requirements as noted below. Basic Requirement: To qualify for the position, you must have IT-related experience demonstrating each of the four competencies listed below: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND Specialized Experience: To qualify for the GS-14 position, you must have one year of specialized experience that is equivalent to at least the GS-13 grade level performing duties such as: Performing Information Systems Security duties to ensure security, reliability, and availability of enterprise-wide mission critical information technology systems; Leading assessment, implementation, maintenance and compliance of information system security in line with security mandates and policies, and internal control audits (ex. such as FISMA/FISCAM, A-123) and managing the closure of vulnerabilities, corrective action plans (CAPs), remediation plans, and Plan of Action and Milestones (POAMs); Managing security activities for systems Authority to Operate (ATO) for a multi cloud environment, risk assessments, and development of artifacts for ATO including System Security Plans, Interconnection Security Agreements (ISAs), and Contingency Plans; and managing information system security and internal controls to mitigate risks and exploring opportunities for internal control improvements critical for the effective management of enterprise-wide information technology systems. This position does not require a Selective Placement Factorbe met in order to meet minimum requirements for the position, however, it is preferred that you have a Certified Information Systems Security Professional (CISSP) certification and/or Certified Information Systems Auditor (CISA) . If you already have a CISSP and/or CISA, please submit a copy of your certification with your application. Documenting experience: In accordance with Office of Personnel Management policy, federal employees are assumed to have gained experience by performing duties and responsibilities appropriate for their official series and grade level as described in their position description. Experience that would not normally be part of the employee's position is creditable, however, when documented by satisfactory evidence, such as a signed memorandum from the employee's supervisor or an SF-50 or SF-52 documenting an official detail or other official assignment. The documentation must indicate whether the duties were performed full time or, if part time, the "percentage of times" the other duties were performed. It is expected that this documentation is included in the employee's official personnel record. In order to receive credit for experience in your resume that is not within the official series and grade level of your official position, you must provide a copy of the appropriate documentation of such experience as indicated above. Experience refers to paid and unpaid experience, including volunteer work done through national Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to gain employment. You will receive credit for all qualifying experience, including volunteer experience. If such experience is on a part-time basis, you must provide the average number of hours worked per week as well as the beginning and ending dates of the experience so it can be fully credited.

Education

Contacts

• Address Office of the Assistant Secretary for Financial Resources 200 Independence Avenue Washington, DC 20201 US
• Name: OMHA Headquarters
• Email: [email protected]