INFORMATION TECHNOLOGY SPECIALIST (INFOSEC)

Your resume must also demonstrate at least one year of specialized experience at or equivalent to the GS-12 grade level or pay band in the Federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: An expert knowledge of a wide range of Information Technology, Cybersecurity, and Computer Security Service Provider concepts, principles and practices required to plan, direct and evaluate incidents and perform a continuing assessment of an organization's security posture. Specialized experience must demonstrate performing duties such as the following: 1) Managing all phases of cybersecurity to include the development, implementation, interpretation, accreditation, risk management, and maintenance of cybersecurity policies, plans, programs, and standards; 2) Overseeing system changes, organization change management, development of system level risk assessments; 3) Directing staff and coordinating operations for cybersecurity issues regarding security management, software, hardware, procedural, network, internet, data communications, and Automated Information Systems (AIS); 4) Overseeing compliance and regulations for Risk Management Framework; and 5) Utilizing a knowledge of defensive cyberspace operations and general operational requirements to target new and emerging threats to the DoD Information Networks. Additional qualification information can be found from the following Office of Personnel Management website:https://www.opm.gov/policy-data-oversight/classification-qualifications/competency-based-policy/general-schedule/2200/2210-competency-based-policy/competency-based-qualification-standard/ Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.

You will coordinate, synchronize, implement and manage the Risk Management Framework (RMF) and Assessments programs.

You will apply information technology (IT) security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information system resources throughout the system lifecycle.

You will establish and publish USINDOPACOM policy to manage the cybersecurity program and provide advice and guidance in its implementation and in procedures used in the development and operation of systems.

You will perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.

You will oversee and execute the development of the USINDOPACOM strategy, policies, procedures and programs in regards to cybersecurity assessments and RMF procedures.