IT Specialist (INFOSEC)

Summary DOT/OST will use a Direct Hire Authority to fill Information Technology (IT) Specialist Information Security (INFOSEC) positions within the Office of the Chief Information Officer. Responsibilities As a IT Spec (INFOSEC), you will: GS-12 Duties: Support DOT management and others on matters pertaining to information systems security programs policy/strategic development, IT continuity of operations planning/support, and support the Department in integrating information security services and related technologies to accomplish departmental IT security goals and program objectives. Support efforts to develop policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data. Conducts risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs. GS-13 Duties: Support the development and implementation of information systems security plans and procedures for assigned program and ensures appropriate product-related training and documentation are developed and made available to customers and ensures the rigorous application of information security/information assurance policies, principles, and practices. Provide program advice to senior DOT management and others on matters pertaining to information systems security programs policy/strategic development, IT continuity of operations planning/support, and support the Department in integrating information security services and related technologies to accomplish departmental IT security goals and program objectives. Develop policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data. Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs. Provide IT governance to ensure assigned programs demonstrate measurable results against broader DOT strategies and goals, meeting relevant legal and regulatory obligations. GS-14 Duties: Provide program advice to senior DOT management and others on matters pertaining to information systems security programs policy/strategic development, IT continuity of operations planning/support, and support the Department in integrating information security services and related technologies to accomplish departmental IT security goals and program objectives. Develop policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data. Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs. Develop and implement information systems security plans and procedures for assigned program and ensures appropriate product-related training and documentation are developed and made available to customers and ensures the rigorous application of information security/information assurance policies, principles, and practices. Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goal. Provide IT governance to ensure assigned programs demonstrate measurable results against broader DOT strategies and goals, meeting relevant legal and regulatory obligations. Conduct systems security evaluations, audits, and reviews; developing systems security contingency plans and disaster recovery procedures; developing and implementing programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures. Participate and/or lead in network and systems design to ensure implementation of appropriate systems security policies. The ideal candidate: DOT OCIO is looking for motivated mid-level to seasoned IT professional, who can share their expertise Information Security (INFOSEC). Requirements Conditions of Employment You must be a U.S. citizen & meet specialized experience to qualify Submit application and resume online by 11:59 PM EST on the closing date Required documents must be submitted by the closing date. Direct Hire Authority will be used to fill this position CONDITIONS OF EMPLOYMENT: SELECTIVE SERVICE: Males born after 12/31/1959 must be registered for the Selective Service. GOVERNMENT TRAVEL CARD: This position involves travel. A government contractor-issued travel card will be issued and must be retained for official business only. PROBATIONARY PERIOD: Applicants may be required to successfully complete a one-year probationary period (unless already completed). SECURITY CLEARANCE: Varies by position. If applicable, you must be able to obtain and maintain the appropriate security clearance of the position to which appointed. BACKGROUND INVESTIGATION: You may be required to complete a background/security investigation and meet preliminary requirements prior to onboarding. FINANCIAL DISCLOSURE: Varies by position. If applicable, the applicant selected is required to submit a Confidential Financial Disclosure Report (OGE Form 450) within 30 days of appointment and annually thereafter. CERTIFICATION: Must be able to obtain and maintain the Federal Acquisition Certification for Contracting Officer’s Representatives (FAC-COR) Certification Level 1.appointment and annually thereafter. Qualifications To meet the minimum qualifications for this position, you must meet the specialized experience qualifications for the grade at which you are requesting consideration. To qualify for the Grade 12, you must have at least one year of experience equal or equivalent to the GS-11 it must include: Experience providing IT support in the development, implementation and coordination of IT activities designed to ensure, protect, and restore IT systems, services, operations and capabilities. Experience in monitoring and evaluating system compliance requirements which involve the collection and analysis of technical and management data associated with IT Security of IT systems, services, requirements, and capabilities. Experience in contributing data and information to of various reports, briefings, summaries, and progress reports pertaining to IT Security of IT systems, services, operations, requirements and capabilities. To qualify for the Grade 13, you must have at least one year of experience equal or equivalent to the GS-12, it must include: Experience in providing technical advice, and instruction in the collection, testing and analysis of technical and management data associated with the agency IT Security programs. Experience preparing and communicating various reports, briefings, summaries, and progress reports pertaining to IT Security of IT systems, services, operations, requirements and capabilities. Experience evaluating, recommending, implementing, and disseminating of IT Security issues and IT activities designed to ensure, protect, and restore IT systems, services, operations requirements and capabilities across various environments within an agency. To qualify for the Grade 14, you must have at least one year of experience equal or equivalent to the GS-13, it must include: Experience in providing technical advice, counsel and recommendations, to ensure efficiency on IT Security issues both technical/non-technical, for short/long-term milestones to support an organization's IT Modernization efforts. Experience developing and guiding in the full life cycle of IT Security appraisals and network penetration testing of across various environments and operationally diverse agency facilities. Experience participating in the collection and analysis of technical and management data associated with the agency IT Security programs, maintaining continued technical liaison with the appropriate staff elements throughout the agency. Experience in preparing various reports, briefings, summaries, and progress reports pertaining to IT Security of IT systems, services, and capabilities and ensures the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security and technology programs, policies, procedures, and tools. KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Information Systems/Network Security - Applies methods, tools, and procedures, including development of information security plans, to prevent information systems vulnerabilities, and provide or restore security of information systems and network services. For all types of consideration, experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. For additional information about applying to Federal positions, please click on the following link: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-policies/#url=e4 All applicants must meet all qualification requirements by the closing date of this announcement. Education Additional Information The Fair Chance to Compete for Jobs Act prohibits the Department of Transportation and its Operating Administrations from requesting an applicant's criminal history record before that individual receives a conditional offer of employment. In accordance with 5 U.S. Code § 9202(c) and 5 C.F.R § 920.201 certain positions are exempt from the provisions of the Fair Chance to Compete Act. Applicants who believe they have been subjected to a violation of the Fair Chance to Compete for Jobs Act, may submit a written complaint to the Department of Transportation by email at, FairChanceAct@dot.gov. To learn more, please visit our page at: The Fair Chance to Compete Act | US Department of Transportation This announcement may be used to fill additional positions if similar vacancies occur within 90 days of the issue date of the referral certificate. Qualified CTAP/ICTAP candidates receive priority and will be referred to the hiring manager.