Information Security Jobs

Department of Education HeadquartersHQI 83

Minimum Qualification Requirements You may meet the minimum qualifications for the AD-00 (Senior Manager), if you possess the specialize experience, education, or a combination of the two. Specialized Experience for the AD-00-(GS-15 equivalent) One year of experience in either federal or non-federal service that is equivalent to at least a AD-00 (GS-14 equivalent) performing two (2) out of three (3) of the following duties or work assignments: 1. Experience leading enterprise-wide information security programs, including strategic planning, policy development, and advising on security risks, resources, and mission requirements aligned with Federal or industry standards and mandates (e.g., FISMA, OMB A-130, NIST). 2.Experience directing and advising on enterprise risk management, security authorizations, and secure IT acquisitions compliance with security regulations, including applying RMF and SCRM to assess and mitigate risks across various IT, cloud, and vendor environments. 3. Experience providing strategic leadership and oversight of enterprise SOC and incident management programs containing critical cyber threats, including develop critical threat response, mitigation, incident response, and required reporting procedures. Basic Experience Requirements Example (Supervisory IT Positions ): Applicants may qualify by meeting or exceeding the minimum proficiency level established for each of the required competencies, in addition to meeting the specialized experience requirement as demonstrated through the assessment of skills. You must possess IT-related experience (paid or unpaid experience and/or completion of specific, intensive training (e.g., IT certification), as appropriate) demonstrating each of the ten competencies listed below. Accountability-Holds self and others accountable for measurable high-quality, timely, and cost-effective results. Determines objectives, sets priorities, and delegates work. Accepts responsibility for mistakes. Complies with established control systems and rules. 2. Customer Service- Anticipates and meets the needs of both internal and external customers. Delivers high-quality products and services; is committed to continuous improvement. 3. Decisiveness- Makes well-informed, effective, and timely decisions, even when data are limited or solutions produce unpleasant consequences; perceives the impact and implications of decisions. 4. Flexibility- Is open to change and new information; rapidly adapts to new information, changing conditions, or unexpected obstacles. 5. Integrity/Honesty- Behaves in an honest, fair, and ethical manner. Shows consistency in words and actions. Models high standards of ethics. 6. Interpersonal Skills- Treats others with courtesy, sensitivity, and respect. Considers and responds appropriately to the needs and feelings of different people in different situations. 7. Oral Communication- Makes clear and convincing oral presentations. Listens effectively; clarifies information as needed. 8. Problem Solving- Identifies and analyzes problems; weighs relevance and accuracy of information; generates and evaluates alternative solutions; makes recommendations. 9. Resilience- Deals effectively with pressure; remains optimistic and persistent, even under adversity. Recovers quickly from setbacks. 10. Written Communication- Writes in a clear, concise, organized, and convincing manner for the intended audience. Applicants may qualify by meeting or exceeding the minimum proficiency level established for each of the required competencies, in addition to meeting the specialized experience requirement as demonstrated through the assessment of skills. You must possess IT-related experience (paid or unpaid experience and/or completion of specific, intensive training (e.g., IT certification), as appropriate) demonstrating each of the seventeen competencies listed below. Knowledge, Skills, and Abilities (KSAs) The quality of your experience will be measured by the extent to which you possess the following knowledge, skills and abilities (KSAs). You do not need to provide separate narrative responses to these KSAs, as they will be measured by your responses to the occupational questionnaire (you may preview the occupational questionnaire by clicking the link at the end of the Evaluations section of this vacancy announcement). 1. Knowledge of cybersecurity laws, regulations, and standards-including the Federal Information Security Modernization Act (FISMA), NIST Risk Management Framework (RMF), OMB mandates, and Authorizing Official (AO) responsibilities-to manage enterprise cyber risk and maintain Authority to Operate (ATO) across mission-critical systems. 2. Skill in directing operational cybersecurity functions, Security Operations Center (SOC) technologies (such as SIEM, network forensics, and packet capture), and incident response frameworks to detect advanced threats, mitigate vulnerabilities, and protect Personally Identifiable Information (PII) and High-Value Assets (HVAs). 3. Ability to oversee Continuous Diagnostics and Mitigation (CDM) and Information Security Continuous Monitoring (ISCM) programs, integrate security across system development lifecycles (SDLC/LMM), and enforce strict cybersecurity requirements across large-scale contractor, cloud hosting, and external partner ecosystems. 4. Skill in leading multidisciplinary technical teams, managing contractor deliverables and IT security budgets, and building strategic partnerships with executives, external oversight authorities, and audit entities (e.g., OIG, DHS, FISMA auditors) to remediate findings and achieve organizational goals. APPLICATION LIMIT: This vacancy announcement is limited to the first 200 applications received and will close at 11:59PM Eastern Time on the day that we receive the 200 application, or at 11:59PM Eastern Time on the listed closing date, whichever occurs first. This position is eligible for Remote/Virtual work. However, this position may fall under the Presidential Memorandum titled "Return to In-Person Work" which will require you to go into the office if you are located within 50 miles of a Department of Education facility in these locations: Washington, DC, Dallas, TX, San Francisco, CA, Seattle, WA, Kansas City, MO, Chicago, Il, Atlanta, GA, Philadelphia, PA, New York City, NY, and location is negotiable. Actual salary will be based on location of selectee. Locality pay tables available at www.opm.gov . We encourage you to read this entire vacancy announcement prior to submitting your application. As a Chief Information Security Officer AD-2210-00 (Senior Manager), you will be responsible for: Serving as the principal advisor to leadership and acts as an Authorizing Official (AO) / Designated Representative under FISMA, establishing agency-wide IT security policies, managing enterprise cyber risk, and aligning security strategies with Department and OMB mandates. Directing Security Operations Center (SOC) capabilities-including SIEM, network forensics, automated surveillance, and threat intelligence-to detect, analyze, and mitigate cyber threats, expedite incident response, and protect high-value assets and sensitive PII. Overseeing vulnerability management, Continuous Diagnostics and Mitigation (CDM), and Authority to Operate (ATO) processes across cloud/data center hosting environments and enterprise applications, while enforcing strict cybersecurity contract standards across thousands of external partners and contractors. Leading cybersecurity audit response and remediation across OIG, DHS, and federal oversight bodies; manages security budgets and contractor performance; and provides comprehensive executive supervision, mentorship, and workforce planning for assigned cybersecurity personnel. Serving as the liaison and overseer of all FISMA, Financial, Office of the Inspector General, Department of Homeland Security, and other security audits.

UPSHQI 75

Before you apply to a job, select your language preference from the options available at the top right of this page. Explore your next opportunity at a Fortune Global 500 organization. Envision innovative possibilities, experience our rewarding culture, and work with talented teams that help you become better every day. We know what it takes to lead UPS into tomorrow—people with a unique combination of skill + passion. If you have the qualities and drive to lead yourself or teams, there are roles ready to cultivate your skills and take you to the next level. Job Description: The Information Security Associate assists with the identification, tracking, and monitoring of information security threats and service operations. This position provides direct support to the business and Information Services (I.S.) staff for security and service related issues. He/She utilizes established processes and tools to focus on incident response, threat identification, analyses, and remediation. This position supports the processes for technical and physical risk management to protect UPS’s information assets. Employee Type: Permanent UPS is committed to providing a workplace free of discrimination, harassment, and retaliation.

VerisignHQI 93

Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system (DNS) services. We are a mission focused, values driven company where each individual can contribute to building a stronger, more secure internet. We offer a dynamic and flexible work environment with competitive benefits and the ability to grow your career. The mission of the Security Architecture Team is to define and advance secure, resilient architecture across Verisign’s systems, networks, applications, cloud platforms, data environments, and emerging technologies. The team combines deep technical expertise with enterprise strategy to reduce risk, enable innovation, and establish security patterns that scale across the organization. We have an exciting opportunity for a Senior Information Security Architect. This senior individual-contributor role shapes enterprise security strategy, reference architectures, standards, and technical requirements across the entire company. The architect will lead high-impact design decisions, resolve complex cross-domain security challenges, and advise engineering and executive leaders on risk, tradeoffs, and long-term technology direction. Working across security engineering, infrastructure, application development, cloud, data, and AI teams, this role ensures security is built into critical services from concept through implementation in production. The Senior Information Security Architect will authoritatively guide the defense of a diverse hybrid technology ecosystem - safeguarding mission essential on-premises architecture, modern cloud platforms, secure application pipelines, and emerging enterprise AI workloads. Key Responsibilities Define enterprise security architecture strategy, principles, reference architectures, reusable patterns, and multi-year roadmaps across network, endpoint, identity, application, cloud, container, data, and detection and response domains Lead security architecture engagement for complex, high-risk, and cross-functional programs; translate business objectives, threat intelligence, and risk appetite into scalable technical controls and design requirements Establish architecture and security requirements for AI/ML systems, including secure MLOps, model and data lifecycle protection, identity and authorization, platform isolation, model provenance, monitoring, privacy, and responsible-use guardrails Review generative and agentic AI designs—including retrieval-augmented generation, vector databases, third-party models, APIs, plugins, tools, and autonomous actions—and address controls to mitigate the risks of prompt injection, data leakage, excessive agency, insecure output handling, and AI supply-chain compromise Perform threat modeling, architecture reviews, and security design assessments for critical systems and emerging technologies; document risk decisions and guide remediation or compensating controls Identify systemic gaps in the security posture, develop prioritized recommendations and investment roadmaps, and communicate technical risk and tradeoffs clearly to executive leadership Evaluate security technologies and vendors, guide proofs of concept, and ensure proposed solutions are interoperable, supportable, measurable, and aligned with strategic architecture Requirements Bachelor’s degree in computer science, cybersecurity, engineering, or a related technical field, or equivalent practical experience 10+ years of broad information security experience, including significant experience with security architecture and design for complex enterprise environments Demonstrated expertise across security architecture and secure networking, cloud, identity (both on premises and cloud), endpoint, application security, data protection, and detection and response Proven ability to lead threat modeling and architecture reviews, and to make consequential technical decisions for high-value or high-availability systems Working knowledge of AI/ML architecture and security, including secure MLOps, model and data governance, generative AI, RAG, AI agents, prompt injection, model supply-chain risk, sensitive-data exposure, access controls, and monitoring Ability to translate complex technical risk into clear recommendations for engineering teams, business stakeholders, and executive leaders Strong cross-functional leadership, facilitation, written communication, and mentoring skills, with a record of influencing decisions without direct authority Preferred: Advanced experience with vulnerability assessment, security risk analysis, and risk-based prioritization Expertise in application security, secure software development, and the OWASP Top 10 and OWASP Top 10 for Large Language Model Applications Experience designing security for public cloud, hybrid environments, infrastructure as code, and CI/CD pipelines Familiarity with frameworks such as NIST CSF, NIST AI RMF, MITRE ATT&CK, or MITRE ATLAS Relevant certifications such as CISSP, CCSP, SABSA, or equivalent This position is based in our Reston, VA office and offers a hybrid work schedule. The pay range is $164,300 - $222,300. The anticipated annual base salary range for this position is noted above, however, base pay offered may vary depending on job-related knowledge, skills, experience. Verisign offers a discretionary bonus which is based on individual and company performance, and certain roles may be eligible for discretionary stock awards. Verisign is an equal opportunity employer. That means we recruit, hire, compensate, train, promote, transfer, and administer all terms and conditions of employment without regard to their race, color, religion, national origin, sex, sexual orientation, gender identity, age, protected veteran status, disability, or other protected categories under applicable law. Additional Information: Our Careers Page Our Benefits Summary Verisign in the Community Our EEO Statement Our Privacy Notice for Job Applicants/Candidates Reasonable Accommodations Staffing agency policy: No fees will be paid for unsolicited resumes submitted to Verisign or our employees by third parties.

Datamark, Inc.HQI 72

As an Information Security Analyst III, you are the senior member of the Information Security Team and the primary owner of DATMARK's most significant security work. Your main focus is leading the response to all High and Critical severity tickets and incidents, drawing from “hands-on” incident response experience to contain, eradicate, and recover from threats. You are responsible for implementing new Information Security controls and for the ongoing maintenance and upkeep of existing ones. You oversee the work of the Information Security Analyst I and II, mentoring and developing the team, with particular focus on growing the Analyst I while recommending risk mitigation solutions based on audit findings and threat intelligence to continuously strengthen DATAMARK's security posture. Primary Responsibilities: 1. Systems Management and Technical Support (80%) o Serves as the primary responder and owner for all High and Critical severity tickets and incidents. o Leads Incident Response end to end; applying hands-on Incident Response experience to contain, eradicate, and recover from incidents, and conducts post-incident reviews and lessons learned. o Responsible for the implementation of new Information Security controls, from evaluation and design through deployment and validation. o Responsible for the ongoing maintenance, upkeep, and tuning of existing information security controls. o Collaborate with the Director of Information Security on Security Architecture, standards, and the Security Roadmap. o Oversees all Information Security Analyst I and II tasks, and assists, mentors, and develops the team with particular focus on growing the Analyst I. o Continuously analyzes all organizational systems and reviews daily threat intelligence to identify and prioritize risk. o Reviews and prioritizes vulnerability findings and drives remediation with the Information Security Analyst I/II and the IT Team through to closure. o Recommends risk mitigation solutions based on audit findings and threat intelligence. o Evaluates, pilots, and recommends new security tooling and technologies. o Maintains and reports on security and compliance metrics monthly. o Develops and maintains incident response playbooks, runbooks, and standard operating procedures. o Assists in reviewing and assessing technical deployments for risk before company-wide implementation and ensures compliance with security standards. o Administers, supports, and maintains enterprise IT security systems, including troubleshooting and remediation of complex system issues. o Works with the IT Team to provide timely, effective support and maintains system documentation, including network and data flow diagrams. As the Senior owner (covering architecture, system maintenance and escalation) the Information Security Analyst III is responsible for the following security platforms and audits, with day-to-day operation performed by the Information Security Analyst I and II: o SIEM/MDR (Security Information and Event Management) (Managed Detection Response) · Regularly verify that all configured log sources (firewalls, servers, intrusion detection systems, etc.) send logs to the SIEM without errors. · Fine-tune existing correlation rules to reduce false positives and improve the accuracy of threat detection. This involves analyzing alerts, adjusting thresholds, and refining rule logic. · Investigate suspicious events and security incidents identified by the SIEM, using the available log data and other information to determine the root cause and scope of the issue. · Follow established incident response procedures to contain, eradicate, and recover from security incidents. o PAM (Privileged Access Management) · Maintain and update Privileged Access Management at the Application Level. · Maintain the use of Privileged Accounts. · Monitor abuse attempts of standard and Privileged Accounts. o DLP (Data Loss Prevention) Management · Regularly review alerts to identify potential data breaches or policy violations. · Fine-tune policies to minimize false positives and negatives. · Create new policies to address emerging threats and data protection needs. · Monitor system performance and resource utilization to ensure optimal operation. o NAC (Network Access Control) Management · Continuously monitor the NAC system dashboard for any alerts, alarms, or suspicious activities. This includes failed authentication attempts, unauthorized access attempts, and devices violating security policies. · Investigate and respond to NAC alerts promptly. Follow established incident response procedures to contain and mitigate any security incidents. · Ensure consistent enforcement of NAC policies across the network. Regularly audit policy configurations to verify effectiveness and identify potential gaps. · Monitor the overall health and performance of the NAC system. Check system resources, database integrity, and software updates. · Work with IT teams, system owners, and other stakeholders to implement remediation plans. This may involve patching systems, updating software, changing configurations, or implementing workarounds. o NDR (Network Detection and Response) Management · Monitor for unusual traffic spikes, unexpected connections, or communication with known malicious IPs/domains. · Investigate any events that seem suspicious or unusual. · Fine-tune model settings and thresholds to better align with Datamark's risk tolerance. · Regularly check system health and performance to ensure it is operating optimally. o Microsoft Entra ID (working knowledge) · Maintain working knowledge of identity and access configuration, conditional access policies, and sign-in/audit logging in Microsoft Entra ID. o Cisco Secure Access (working knowledge) · Maintain working knowledge of Cisco Secure Access (SSE) policy, secure connectivity, and access enforcement. o Universal SSO (working knowledge) · Maintain working knowledge of Universal Single Sign-On integrations and authentication flows for enterprise applications. o Micro-Segmentation (working knowledge) · Maintain working knowledge of network micro-segmentation design and policy enforcement to limit lateral movement. o CSPM (working knowledge) · Maintain working knowledge of Cloud Security Posture Management (CSPM) findings, misconfigurations, and overall cloud compliance posture. o Ai Security (working knowledge) · Maintain working knowledge of best practices to secure in house applications using Ai, external LLMs and Autonomous Agents. This includes working with the Director of Information Security to create an internal framework to properly secure how an agent connects from MCP Servers to APIs. o May also be responsible for any upcoming technical controls that may be implemented. 2. Compliance and Governance (10%) o Create and remediate any incidents found during the technical control review process. o Verify that assigned controls are working within agreed upon SLAs and vendor specifications. o Works independently to follow established security protocols to safeguard the organization's IT infrastructure. o Works independently to ensure compliance with relevant Security Frameworks and Regulations from CIS and NIST CSF to PCI, SOC 2 Type II, and ISO 27001. 3. Administrative Duties (10%) o Responsible for creating and updating Standard Operating Procedures. o Maintain assigned technical control documentation. o Create new documentation or procedures per the direction of the Director of Information Security. o Provide guidance and support to the Information Security Analyst I and II. o Willingness to travel to DATAMARK global sites as necessary. Requirements Minimum Qualifications: · Education Requirements: o Bachelor’s degree in Computer Science or related field, field experience in lieu of degree can be considered · Field Experience: o At least five years of experience in Information Security. · Position Experience: o At least 1 year of experience in a senior or lead Information Security Analyst role, including hands-on incident response (detection, containment, eradication, and recovery). o Demonstrated experience with traditional vulnerability analysis: identifying, categorizing, prioritizing, tracking, and validating remediation of known vulnerabilities by accountable IT teams. · Other Qualifications: o One or more of the following: ISC2 CISSP (Certified Information Systems Security Professional) is highly preferred ISC2 CCSP (Certified Cloud Security Professional) GIAC GCIH (Certified Incident Handler) CompTIA CASP+ (Advanced Security Practitioner) ISACA CISA (Certified Information Systems Auditor) Required Skills: Extremely organized and detail oriented Capable of holding team members accountable to timely delivery of audit evidences Practices and methods of IT strategy, enterprise architecture and security architecture Excellent analytical and problem-solving abilities to identify and remediate security risks Team-work mentality to develop security solutions in collaboration with other IT professionals Benefits Bundle of Benefits as follow; PF Gratuity Mediclaim

Military Treatment Facilities under DHAHQI 83

Who May Apply: US Citizens In order to qualify, you must meet the education requirements described below. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social). You will receive credit for all qualifying experience, including volunteer experience. Your resume must clearly describe your relevant experience; if qualifying based on education, your transcripts will be required as part of your application. Additional information about transcripts is in this document. Basic Requirement for Information Technology Specialist (Policy and Planning/Information Security): Specialized and Other Experience: One year of specialized experience which includes managing information technology operations by supporting network or systems administration, implementing cybersecurity measures, assisting with the development or evaluation of IT policies, and providing technical guidance to users or other staff. This definition of specialized experience is typical of work performed at the next lower grade/level position in the federal service (GS-12). The specialized experience must include, or be supplemented by, information technology related experience (paid or unpaid experience and/or completion of specific, intensive training, as appropriate) which demonstrates each of the four competencies, as defined: (1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Examples of IT-related experience demonstrating this competency include: completing thorough and accurate work independently, even in the most difficult or stressful situations; occasionally reviewing work completed by others. (2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Examples of IT-related experience demonstrating this competency include: resolving routine and non-routine problems, questions, or complaints; developing and maintaining strong, mutually supportive working relationships with customers; conducting evaluation of support to determine quality of services and customer satisfaction, and recommending procedural changes based on customer need or changes in policy and/or regulation. (3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Examples of IT-related experience demonstrating this competency include: convincingly conveying complex information to customers; presenting thoughts that are well-organized and demonstrating confidence in the facts and ideas; adjusting style when working with individuals with different levels of understanding; using various methods to explain and convey information. (4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Examples of IT-related experience demonstrating this competency include: solving complex or sensitive problems by developing and proposing strategic alternatives; identifying possible conflicts and shared benefits; helping team anticipate problems and identifying and evaluating potential sources of information; providing feedback and coaching to others to help solve problems; engaging appropriate stakeholders when developing solutions in order to understand and incorporate multiple perspectives and needs; evaluating the effectiveness of decisions and adjusting future decisions as appropriate. Some federal jobs allow you to substitute your education for the required experience in order to qualify. For this job, you must meet the qualification requirement using experience alone--no substitution of education for experience is permitted. Serve as the Chief Information Officer by directing all IT activities to include the planning, analysis, policy, programming, procurement, implementation, operation, and maintenance of all computer and data communication systems. Maintain complex network and database management systems that supports the Medical Treatment Facility’s clinical and administrative missions, resolving complex IT issues and recommending system enhancements as necessary. Develop information technology management policies, rules, regulations, and procedures. Manage IT procurement, resource allocation, and lifecycle planning for hardware, software, and Automated Data Processing Equipment to meet operational and future mission requirements. Provide technical guidance, training, supervision, and workforce development for IT personnel to ensure effective performance, alignment with certification requirements, and support of organizational goals. Maintain continuous cybersecurity monitoring and risk management activities to protect all computer and information systems. Monitor emerging technological advances and developments in data communications, computer hardware, and operating system software by coordinating with vendors, researching, and attending professional development.

Placements24HQI 78

Placements24 seeks a Remote Information Security Specialist to protect digital assets by implementing and monitoring security controls in a distributed team. You will identify vulnerabilities, respond to incidents, and ensure policy compliance while collaborating with IT colleagues in a fully remote setup. This role offers flexibility, a competitive salary, and a chance to influence security posture from anywhere. J-18808-Ljbffr

Placements24HQI 78

Placements24 is seeking an experienced Information Security Consultant for a contract, fully remote engagement. You will provide strategic guidance, perform security assessments, and implement improvements to enhance a client’s security posture. This role suits a seasoned professional seeking a flexible, project-based opportunity. You will design and deliver robust security solutions, advise on risk mitigation, and produce detailed findings for senior leadership. J-18808-Ljbffr

Air National Guard UnitsHQI 78

This position is being advertised as both Internal Merit Promotion and Open to the Public. Applicants must apply to the announcements with the status for which they would like to be considered. The Open to Public announcement can be located at the following link: https://www.usajobs.gov/job/885923900 Internal Merit Promotion applicants will be given first consideration for this vacancy. If no internal candidates are selected, the hiring manager may be referred candidates from the Open to Public vacancy announcement. GENERAL EXPERIENCE: Experience, education or training in collecting and analyzing data effectively, efficiently, and accurately. Able to apply procedures and directives by reading and interpreting technical material. Ability to communicate clearly and effectively orally and in writing, using presentation and report formats. Demonstrated ability to follow directions, to read, understand, and retain a variety of instructions, regulations, and procedures. Learned ability to assess the surrounding environment to recognize immediate risk levels. SPECIALIZED EXPERIENCE: 1-year specialized experience, education, or training equivalent to at least the next lower grade level. Length of time is not of itself qualifying. Candidates' experience should be evaluated on the basis of duties performed rather than strictly on the rank of the individual; however, established compatibility criteria/assignments must be followed. The applicant's record of experience and/or training must show possession of the knowledge, skills and abilities needed to fully perform the duties of the position. The primary purpose of the position is to administer the Special Security Office (SSO) and all Sensitive Compartmented Information (SCI)-associated security programs and measures and provides detailed research and analysis on physical, computer, and personnel security. This position performs the following duties: Technical authority on all SCI security matters and all other areas of classified security and classification within the unit. As principal advisor to the commander, reports on the organization's SSO and SCI, physical, computer, information, personnel, and administrative security. Provides oversight of unit and SSO security self-inspections and presents detailed and comprehensive reports with corrective action taken to the unit commander. Follows up to ensure complete and quality resolution of discrepancies. Assesses and revises policies and procedures to improve their quality, timeliness, and efficiency. Administers the SCI security clearance program for all assigned personnel, ensuring all required clearances are up-to-date and completed. Tracks and administers SCI clearances for all in-processing personnel to ensure mission readiness. Terminates or transfers SCI clearances for out-processing personnel. Represents the unit to a variety of installation and functional areas, including national-level organizations. Performs other duties as assigned.

Air National Guard UnitsHQI 78

This position is being advertised as both Internal Merit Promotion and Open to the Public. Applicants must apply to the announcements with the status for which they would like to be considered. The Internal Merit Promotion announcement can be located at the following link: https://www.usajobs.gov/job/885924700 Internal Merit Promotion applicants will be given first consideration for this vacancy. If no internal candidates are selected, the hiring manager may be referred candidates from the Open to Public vacancy announcement. GENERAL EXPERIENCE: Experience, education or training in collecting and analyzing data effectively, efficiently, and accurately. Able to apply procedures and directives by reading and interpreting technical material. Ability to communicate clearly and effectively orally and in writing, using presentation and report formats. Demonstrated ability to follow directions, to read, understand, and retain a variety of instructions, regulations, and procedures. Learned ability to assess the surrounding environment to recognize immediate risk levels. SPECIALIZED EXPERIENCE: 1-year specialized experience, education, or training equivalent to at least the next lower grade level. Applicants will be graded based on their answers to the assessment questionnaire and their supporting documentation. If supporting documentation does not support the answers to the questionnaire, applicants' scores may be modified as appropriate. Applicants will be graded as follows: 90-100 Points: Highly Qualified 80-89 Points: Well Qualified 70-79 Points: Qualified After adjudicating Veterans Preference, applicants will be referred to the hiring manager in the following order: 1. Highly Qualified 2. Well Qualified 3. Qualified Length of time is not of itself qualifying. Candidates' experience should be evaluated on the basis of duties performed rather than strictly on the rank of the individual; however, established compatibility criteria/assignments must be followed. The applicant's record of experience and/or training must show possession of the knowledge, skills and abilities needed to fully perform the duties of the position. The primary purpose of the position is to administer the Special Security Office (SSO) and all Sensitive Compartmented Information (SCI)-associated security programs and measures and provides detailed research and analysis on physical, computer, and personnel security. This position performs the following duties: Technical authority on all SCI security matters and all other areas of classified security and classification within the unit. As principal advisor to the commander, reports on the organization's SSO and SCI, physical, computer, information, personnel, and administrative security. Provides oversight of unit and SSO security self-inspections and presents detailed and comprehensive reports with corrective action taken to the unit commander. Follows up to ensure complete and quality resolution of discrepancies. Assesses and revises policies and procedures to improve their quality, timeliness, and efficiency. Administers the SCI security clearance program for all assigned personnel, ensuring all required clearances are up-to-date and completed. Tracks and administers SCI clearances for all in-processing personnel to ensure mission readiness. Terminates or transfers SCI clearances for out-processing personnel. Represents the unit to a variety of installation and functional areas, including national-level organizations. Performs other duties as assigned.

Air National Guard UnitsHQI 78

This position is being advertised as both Internal Merit Promotion and Open to the Public. Applicants must apply to the announcements with the status for which they would like to be considered. The Internal Merit Promotion announcement can be located at the following link: https://www.usajobs.gov/job/885921500 Internal Merit Promotion applicants will be given first consideration for this vacancy. If no internal candidates are selected, the hiring manager may be referred candidates from the Open to Public vacancy announcement. GENERAL EXPERIENCE: Experience, education or training in collecting and analyzing data effectively, efficiently, and accurately. Able to apply procedures and directives by reading and interpreting technical material. Ability to communicate clearly and effectively orally and in writing, using presentation and report formats. Demonstrated ability to follow directions, to read, understand, and retain a variety of instructions, regulations, and procedures. Learned ability to assess the surrounding environment to recognize immediate risk levels. SPECIALIZED EXPERIENCE: 1-year specialized experience, education, or training equivalent to at least the next lower grade level. Applicants will be graded based on their answers to the assessment questionnaire and their supporting documentation. If supporting documentation does not support the answers to the questionnaire, applicants' scores may be modified as appropriate. Applicants will be graded as follows: 90-100 Points: Highly Qualified 80-89 Points: Well Qualified 70-79 Points: Qualified After adjudicating Veterans Preference, applicants will be referred to the hiring manager in the following order: 1. Highly Qualified 2. Well Qualified 3. Qualified Length of time is not of itself qualifying. Candidates' experience should be evaluated on the basis of duties performed rather than strictly on the rank of the individual; however, established compatibility criteria/assignments must be followed. The applicant's record of experience and/or training must show possession of the knowledge, skills and abilities needed to fully perform the duties of the position. The primary purpose of the position is to administer the Special Security Office (SSO) and all Sensitive Compartmented Information (SCI)-associated security programs and measures and provides detailed research and analysis on physical, computer, and personnel security. This position performs the following duties: Technical authority on all SCI security matters and all other areas of classified security and classification within the unit. As principal advisor to the commander, reports on the organization's SSO and SCI, physical, computer, information, personnel, and administrative security. Provides oversight of unit and SSO security self-inspections and presents detailed and comprehensive reports with corrective action taken to the unit commander. Follows up to ensure complete and quality resolution of discrepancies. Assesses and revises policies and procedures to improve their quality, timeliness, and efficiency. Administers the SCI security clearance program for all assigned personnel, ensuring all required clearances are up-to-date and completed. Tracks and administers SCI clearances for all in-processing personnel to ensure mission readiness. Terminates or transfers SCI clearances for out-processing personnel. Represents the unit to a variety of installation and functional areas, including national-level organizations. Performs other duties as assigned.

Air National Guard UnitsHQI 78

This position is being advertised as both Internal Merit Promotion and Open to the Public. Applicants must apply to the announcements with the status for which they would like to be considered. The Open to Public announcement can be located at the following link: https://www.usajobs.gov/job/885920700 Internal Merit Promotion applicants will be given first consideration for this vacancy. If no internal candidates are selected, the hiring manager may be referred candidates from the Open to Public vacancy announcement. GENERAL EXPERIENCE: Experience, education or training in collecting and analyzing data effectively, efficiently, and accurately. Able to apply procedures and directives by reading and interpreting technical material. Ability to communicate clearly and effectively orally and in writing, using presentation and report formats. Demonstrated ability to follow directions, to read, understand, and retain a variety of instructions, regulations, and procedures. Learned ability to assess the surrounding environment to recognize immediate risk levels. SPECIALIZED EXPERIENCE: 1-year specialized experience, education, or training equivalent to at least the next lower grade level. Length of time is not of itself qualifying. Candidates' experience should be evaluated on the basis of duties performed rather than strictly on the rank of the individual; however, established compatibility criteria/assignments must be followed. The applicant's record of experience and/or training must show possession of the knowledge, skills and abilities needed to fully perform the duties of the position. The primary purpose of the position is to administer the Special Security Office (SSO) and all Sensitive Compartmented Information (SCI)-associated security programs and measures and provides detailed research and analysis on physical, computer, and personnel security. This position performs the following duties: Technical authority on all SCI security matters and all other areas of classified security and classification within the unit. As principal advisor to the commander, reports on the organization's SSO and SCI, physical, computer, information, personnel, and administrative security. Provides oversight of unit and SSO security self-inspections and presents detailed and comprehensive reports with corrective action taken to the unit commander. Follows up to ensure complete and quality resolution of discrepancies. Assesses and revises policies and procedures to improve their quality, timeliness, and efficiency. Administers the SCI security clearance program for all assigned personnel, ensuring all required clearances are up-to-date and completed. Tracks and administers SCI clearances for all in-processing personnel to ensure mission readiness. Terminates or transfers SCI clearances for out-processing personnel. Represents the unit to a variety of installation and functional areas, including national-level organizations. Performs other duties as assigned.

Cisco SystemsHQI 83

About Cisco and the Security & Trust Organization (STO) In today’s rapidly evolving digital landscape, security is a shared responsibility. At Cisco, the Security and Trust Organization (STO) is central to building a secure infrastructure and fostering customer trust. As a key enabler of Cisco’s mission to be the #1 Trusted Business Partner , STO leads the innovation, training, and implementation of security and trust capabilities across all Cisco products. Reporting to Cisco’s Chief Security and Trust Officer, STO is foundational in embedding security into every aspect of Cisco’s operations. The Cloud Assurance, Readiness & Compliance (CloudARC) team within STO is responsible for ensuring Cisco’s cloud offering portfolio demonstrates the highest levels of security assurance to our global customers while maintaining cybersecurity compliance and certifications required to access markets around the world. Our team plays a leading role in understanding customer needs for security, privacy, data protection, and customer data management. We inform, support, and collaborate with customers, Sales, Engineering, Supply Chain, Government Affairs and Legal; building industry leading trust and transparency through security and compliance. Role Overview The Information Security Engineer will play a critical role in maintaining compliance certifications for Cisco Cloud offerings across the globe, and supporting compliance and regulatory frameworks such as SOC2, ISO27001/17/18, ENS, C5, etc. This role will be responsible for facilitating and executing internal control assessments and external audits in collaboration with CloudARC leadership, Product Management, and Engineering. The ideal candidate is enthused by the idea of compliance as a business enabler, has hands-on experience with multiple compliance and regulatory frameworks (e.g. SOC2, ISO27001/17/18, ENS, C5, etc.), and has strong experience assessing complex product ecosystems against cloud control frameworks. This role is ideal for the strategic thinker who is passionate about building scalable compliance capabilities, can clearly communicate technical requirements to stakeholders across the business ecosystem, and is driven by the opportunity to be on the forefront of customer trust. Key Responsibilities • Support security compliance and regulatory audits in Cisco’s cloud compliance portfolio. • Collaborate with a team of compliance engineers to develop and execute common control strategies, ensuring consistency across audits. • Partner with Cisco Business Units (BUs) to support the adoption and compliance with Common Cloud Controls. • Serve as a subject matter expert for relevant security compliance frameworks, providing guidance and expertise to product and engineering teams. • Conduct information security assessments over a portfolio of products and prepare reports summarizing compliance results and remediation plans. • Work with CloudARC leaders and Product Management to develop and maintain the Product Compliance roadmaps for Cisco Cloud offerings. • Support initiatives related to data privacy, security, and cloud compliance requirements. Required Skills: • 2+ years of experience in a security or compliance role. • Bachelor’s degree in Information Security, Computer Science, or a related field. • Hands-on experience working with cloud platforms, particularly AWS or other major cloud environments. • Proven track record in supporting delivery of compliance reports and certifications. • Deep expertise in regulatory compliance and security frameworks such as ISO 27001/17/18, SOC2, C5, ENS, and similar standards. • Strong understanding of key IT security processes and services, including Secure SDLC, Identity and Access Management (IAM), Vulnerability Management, and Backup/Disaster Recovery. • Experience partnering with auditors to drive attainment and maintenance of compliance certifications. • Excellent communication skills, with the ability to collaborate effectively across technical and non-technical teams. • Highly organized and adaptable, with demonstrated success managing multiple priorities in a fast-paced, evolving environment. • Team-oriented mindset, with a commitment to collaboration, knowledge sharing, and continuous improvement. Preferred Skills: • Industry certifications such as CISA, CISSP, CCSK, or equivalent certifications. • Master’s degree in Information Security, Computer Science, or related field. Why Cisco? At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. We are Cisco, and our power starts with you. Disclaimer To ensure that we hire the best talent in the right way, we follow a strict hiring process and recently, Cisco has been made aware of fraudulent recruiters claiming to be from the company. Please be advised that any communication from Cisco about careers will: • be in direct response to an application you have submitted through the company career site • begin with screening or an interview • originate from a Cisco email address, and • be conducted across email, phone, or WebEx Cisco will never make a job offer without conducting an interview process or ask you for money in any way. If you have been requested to apply for a role or have received an offer from a site other than https://careers.cisco.com or cisco.wd5.myworkday.com , do not provide any personal identifying information, including your Aadhaar or other personal identifying number, birth certificate, banking information, driver's license, or passport. If you are the target of a recruiting scam, consider filing a report with your local law enforcement authorities. Cisco bears no responsibility, and cannot be held liable, for any claims, damages, expenses, or other inconvenience resulting from or in any way connected to recruiting scams.

Cisco SystemsHQI 86

The application window is expected to close on: 10/29/2026 This is a hybrid role in Raleigh, North Carolina, Atlanta, Georgia or other Cisco hubs. (2-3 Days per week onsite) Meet the Team The Enterprise Information Security team is at the forefront of safeguarding Cisco’s most valuable assets—its data and its people. We are a collaborative group of problem-solvers and technologists committed to a security-first culture. We work across the company, leveraging modern tools to protect information, ensure compliance, and mitigate risks. Join us and start your career journey helping to shape Cisco’s cybersecurity landscape through robust data protection and automated security solutions. Your Impact As an Information Security Engineer, you will design, implement, automate, and operate security capabilities that protect the company's data and infrastructure. This role is exciting because you will work with modern technologies to solve complex enterprise-scale challenges, influence the protection of our customers and intellectual property, and help security become an enabler of business innovation. You will contribute by engineering security controls that scale across thousands of users, improving the detection and prevention of data ex-filtration, and reducing operational risk through automation. Key Responsibilities • Build, deploy, and maintain components of enterprise data security processes, tools, and services across on-premises, cloud, and hybrid environments. • Support the rollout and monitoring of DLP solutions and DSPM platforms across endpoints and cloud/SaaS environments. • Develop and maintain playbooks, SOPs, and automation scripts (Python/PowerShell) to streamline compliance and security operations. • Partner with IT and security architects to ensure adherence to frameworks such as NIST CSF. • Participate in data security assessments, partner with data compliance and investigation teams to reduce data loss risk and drive continuous improvement of the enterprise security posture. Minimum Qualifications • 3+ years of experience in information security or a related technical field in large, sophisticated enterprise environments. • Practical knowledge of data protection technologies such as DLP and DSPM platforms. • Proficiency in scripting (e.g., Python or PowerShell) and exposure to cloud environments (AWS, Azure, or GCP). • Familiarity with Microsoft security solutions (e.g., Purview, Defender for Endpoint) and the NIST Cybersecurity Framework (CSF). • Proven ability to collaborate multi-functionally with IT and security architects to deploy and operationalize enterprise data protection controls and policies Preferred Qualifications • Experience working with enterprise-scale data protection and security architecture. • Interest or experience in AI/ML applications for security automation and threat detection. • Strong communication and influencing skills to collaborate effectively with IT and security teams. • Relevant certifications (e.g., CISSP, Security+, SANS AI). • Desire to grow toward security architect roles and engage in cross-functional security initiatives. S&TO Why Cisco? At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. We are Cisco, and our power starts with you. Message to applicants applying to work in the U.S. and/or Canada: The starting salary range posted for this position is $128,600.00 to $184,900.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation*, equity, or benefits. Individual pay is determined by the candidate's hiring location, market conditions, job-related skillset, experience, qualifications, education, certifications, and/or training. The full salary range for certain locations is listed below. For locations not listed below, the recruiter can share more details about compensation for the role in your location during the hiring process. U.S. employees are offered benefits, subject to Cisco’s plan eligibility rules, which include medical, dental and vision insurance, a 401(k) plan with a Cisco matching contribution, paid parental leave, short and long-term disability coverage, and basic life insurance. Please see the Cisco careers site to discover more benefits and perks. Employees may be eligible to receive grants of Cisco restricted stock units, which vest following continued employment with Cisco for defined periods of time. U.S. employees are eligible for paid time away as described below, subject to Cisco’s policies: • 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees • 1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco • Non-exempt employees** receive 16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees • Exempt employees participate in Cisco’s flexible vacation time off program, which has no defined limit on how much vacation time eligible employees may use (subject to availability and some business limitations) • 80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next • Additional paid time away may be requested to deal with critical or emergency issues for family members • Optional 10 paid days per full calendar year to volunteer For non-sales roles, employees are also eligible to earn annual bonuses subject to Cisco’s policies. Employees on sales plans earn performance-based incentive pay on top of their base salary, which is split between quota and non-quota components, subject to the applicable Cisco plan. For quota-based incentive pay, Cisco typically pays as follows: • .75% of incentive target for each 1% of revenue attainment up to 50% of quota; • 1.5% of incentive target for each 1% of attainment between 50% and 75%; • 1% of incentive target for each 1% of attainment between 75% and 100%; and • Once performance exceeds 100% attainment, incentive rates are at or above 1% for each 1% of attainment with no cap on incentive compensation. For non-quota-based sales performance elements such as strategic sales objectives, Cisco may pay 0% up to 125% of target. Cisco sales plans do not have a minimum threshold of performance for sales incentive compensation to be paid. The applicable full salary ranges for this position, by specific state, are listed below: New York City Metro Area: $155,000.00 - $256,000.00 Non-Metro New York state & Washington state: $138,100.00 - $227,900.00 * For quota-based sales roles on Cisco’s sales plan, the ranges provided in this posting include base pay and sales target incentive compensation combined. ** Employees in Illinois, whether exempt or non-exempt, will participate in a unique time off program to meet local requirements.

Deutsche BankHQI 72

This job is with Deutsche Bank, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ business community. Please do not contact the recruiter directly. Position Overview Role Description This Role is part of the Identity and Access management & governance team within Deutsche India Pvt.Ltd. Identity and Access management services for the Global applications, This Role will be responsible for performing the governance for various projects within Identity and A

Federal Emergency Management AgencyHQI 81

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race, sex, color, religion, or national origin. To meet the minimum qualification requirements for this position, you must show that you possess the Executive Core Qualifications (ECQ) and Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit, will not be reviewed beyond page 2 or may be disqualified. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position. TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications. TQ 1: Enterprise Cybersecurity Strategy and Risk Management: Demonstrated experience developing, implementing, and leading an enterprise cybersecurity strategy and risk management program within a large, complex, or federated organization. This includes establishing cybersecurity governance, policies, standards, performance measures, and risk management processes; aligning security initiatives and investments with mission priorities and federal mandates; modernizing enterprise cybersecurity through approaches such as Zero Trust, secure cloud adoption, dynamic testing for continuous monitoring and assessment, and risk-based vulnerability management; overseeing system authorization; managing significant cybersecurity budgets, programs, contracts, and workforce requirements; and advising senior executives on cyber risk, resource tradeoffs, and enterprise security posture. TQ 2: Cyber Operations, Incident Response, and Resilience: Extensive experience leading cybersecurity operations in large, complex environments, including management or oversight of a security operations center; incident detection, analysis, response, recovery, and reporting; coordination of response and mitigation activities during significant cyber incidents and emerging threats; and integration of technical, operational, and executive stakeholders to strengthen operational resilience, continuity of operations, and organizational readiness. EXECUTIVE CORE QUALIFICATIONS (ECQs): In addition to the Technical Qualification Requirements listed above, all new entrants into the Senior Executive Service (SES) under a career appointment will be assessed for executive competency against the following five mandatory ECQs. If your 2-page resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for the position. There are five ECQs: ECQ 1: Commitment to the Rule of Law and the Principles of the American Founding - This core qualification requires a demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. ECQ 2: Driving Efficiency - This core qualification involves the demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. ECQ 3: Merit and Competence - This core qualification involves the demonstrated knowledge, ability and technical competence to effectively and reliably produce work that is of exceptional quality. ECQ 4: Leading People - This core qualification involves the demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. ECQ 5: Achieving Results - This core qualification involves the demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors. Note: If you are a member of the SES or have been certified through successful participation in an OPM approved SES Candidate Development Program (SESCDP), or have SES reinstatement eligibility, you do not need to address the (5) ECQs in your resume. In lieu of, you MUST attach proof (e.g., SF-50, Certification by OPM's SES Qualifications Review Board (QRB)) of your eligibility for noncompetitive appointment to the SES. The Chief Information Security Officer (CISO) is responsible for performing and supervising work that involves applying analytical processes to the planning, design, and implementation of new and improved information systems to meet the mission requirements of the Agency's lines of business and administrative programs and safeguards systems from cyber threats in accordance with federal laws and regulations. This role executes the planning and delivery of secure, high-quality enterprise application services for FEMA personnel and stakeholders. In addition, the CISO, provides the security architectural planning and delivery of information technology (IT) services across the enterprise and in support of FEMA program offices and regions. FEMA operates extensive IT capabilities (day-to-day, emergency, fixed, and mobile) including its own switched telecommunications and data networks, satellite systems, wireless systems, and complex automated applications integral to FEMA program missions. FEMA's IT capabilities are intra/inter-agency and inter-governmental in scope but are managed under the leadership of the CIO. Primary Duties: Serves as the Senior Advisor to the CIO regarding development, publication, and implementation of Agency cybersecurity (information security) policies, standards, and guidance, as well as coordination, integration, training, and enforcement of all aspects of the Agency's cybersecurity program, consistent with guidance and direction from the U.S. Department of Homeland Security and in compliance with applicable laws, regulations, directives, and standards. Leads the Agency's implementation of all applicable regulatory requirements including the Computer Security Act, Federal Information Technology Acquisition Reform ACT (FITARA), Federal Information Security Management Act (FISMA), the Clinger-Cohen Act, relevant Office of Management and Budget (OMB) circulars and memoranda, Executive Orders, and Presidential Directives, as well as Congressional direction. Demonstrates leadership in guiding FEMA's cybersecurity program and informing Agency-wide information technology acquisitions. The incumbent provides daily management and oversight of the Office of the Chief Information Security Officer and its Division(s). Responsible for planning and implementing the Agency-wide cybersecurity enhancement initiatives, following all applicable laws, directives, policies, and directed actions and providing methodologies, tools, guidance, and subject-matter expertise to help ensure FEMA's cybersecurity programs can meet federal compliance and reporting requirements. The incumbent is also responsible for a balanced, robust, and secure information environment for FEMA systems. Responsible for planning and implementing the Agency-wide cybersecurity enhancement initiatives, following all applicable laws, directives, policies, and directed actions and providing methodologies, tools, guidance, and subject-matter expertise to help ensure FEMA's cybersecurity programs can meet federal compliance and reporting requirements. The incumbent is also responsible for a balanced, robust, and secure information environment for FEMA systems. Effectively develops and communicates the cybersecurity strategy throughout the Agency and drives the implementation of the Agency's strategic information security management plan, including coordination with stakeholders in FEMA directorates, offices, and regions. Utilizes a full range of strategic management and leadership skills and understands, explains, and presents complex technical ideas to both technical and non-technical audiences at all levels up to the highest in a persuasive and convincing manner. Exercises broad and deep IT knowledge coupled with equivalent knowledge of the activities of those organizations that use and exploit IT. Communicates the potential impact of emerging security technologies on organizations as well as individuals and analyzes the risks of using or not using such technologies. Assesses the impact of legislation and actively promotes cybersecurity compliance. Takes the initiative to keep both his/her own and subordinates' skills current and maintains an awareness of developments in cybersecurity and other IT-related disciplines. Responsible for program management, organizational change, coordination, communication, policy, and oversight. Provides planning guidance for cybersecurity priorities within the Agency to all designated IT personnel, including System Owners, Information System Security Officers, and Information System Security Managers throughout the Agency, to ensure a common, comprehensive approach to securing information and IT systems and applications used to support FEMA goals and objectives.

Office of the Secretary of DefenseHQI 83

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race, sex, color, religion, or national origin. To meet the minimum qualification requirements for this position, you must show that you possess the Executive Core Qualifications (ECQ), and Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit will be disqualified. Please see "Required Documents" section below for all resume formatting requirements. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position. Do NOT submit a separate narrative statement specifically addressing the Executive Core Qualifications (ECQs) or the Technical Qualifications (TQs). TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications: TQ 1: Extensive knowledge and experience leading and managing cybersecurity programs, policies, operations, and resources in support of large-scale cybersecurity missions, including cryptographic modernization, identity management solutions, Public Key Infrastructure, Cross Domain Solutions, Key Management Infrastructure, and post-quantum cryptography. TQ 2: Demonstrated knowledge and experience orchestrating the strategic alignment, deployment, and oversight of modernized Cybersecurity and Defensive Cyber Operations, ensuring enterprise-wide readiness and protection of vital critical asset infrastructures. EXECUTIVE CORE QUALIFICATIONS (ECQs): In addition to the Technical Qualification Requirements listed above, all new entrants into the Senior Executive Service (SES) under a career appointment will be assessed for executive competency against the following five mandatory ECQs. If your 2-page resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for the position. There are five ECQs: ECQ 1: Commitment to the Rule of Law and the Principles of the American Founding - This core qualification requires a demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. Sub-Competencies: Knowledge of the American System of Government: Demonstrates understanding and appreciation of the American system of government, including the Constitution, the Bill of Rights, separation of powers, federalism, and the historical development of the American Nation. Commitment to the Rule of Law: Upholds the principles of the American Founding, including equality under the law and democratic self-government. Ensures the law is applied fairly and consistently. Civic-Mindedness: Stays up-to-date on important developments in American government and aligns organizational objectives and practices with presidential and public interests. Demonstrates a commitment to serve the American people. ECQ 2: Driving Efficiency - This core qualification involves the demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. Sub-Competencies: Fiscal Responsibility: Strategically manages, allocates and monitors financial resources. Aligns priorities and initiatives to justify budget proposals. Monitors expenditures, cuts unnecessary costs, and uses cost-benefit analysis to set priorities. Managing Resources: Manages resources efficiently and effectively based on current and projected organizational goals, skills, budget considerations, and staffing needs. Leveraging Technology: Explores emerging technology and potential applications. Incorporates technology to enhance efficiency and achieve results. Ensures access to and security of technology systems. ECQ 3: Merit and Competence - This core qualification involves the demonstrated knowledge, ability and technical competence to effectively and reliably produce work that is of exceptional quality. Sub-Competencies: Technical Skill: Possesses the requisite technical knowledge and subject matter expertise to consistently produce timely, high-quality work. Is considered a strong contributor in his or her domain. Problem Solving: Engages in critical and data-driven thinking when diagnosing root causes and evaluating options. Identifies and promptly addresses the most pressing, high-priority problems. Agility and Resilience: Anticipates and adapts to change, new ideas, new information, and new conditions. Is committed to continuous improvement. Deals effectively with pressure and remains optimistic and persistent, even under adversity. ECQ 4: Leading People - This core qualification involves the demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. Sub-Competencies: Accountability: Ensures that employees are appropriately recruited, selected, appraised, trained, and retained. Takes swift action to address performance- or conduct-based deficiencies in employees supervised. Holds self and others accountable for measurable high-quality, timely, and cost-effective results. Developing Others: Recognizes and rewards outstanding achievement in others. Develops the ability of others to perform and contribute to the organization by providing opportunities to learn through formal and informal methods. Cultivates a dynamic environment in which employees are not afraid to make mistakes. Executive Judgement: Makes well-reasoned, timely, and effective decisions and considers short- and long-term implications. Communicates effectively with stakeholders across all organizational levels, sharing and guarding information where appropriate. ECQ 5: Achieving Results - This core qualification involves the demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors. Sub-Competencies: Operational Mindset: Effectively translates strategies into actionable steps and processes. Partners effectively with stakeholders to drive adoption and addresses blockers to ensure successful implementation. Innovation: Applies creativity to improving products and processes, challenges convention, takes measured risks, and considers ways to simplify and remove unnecessary requirements. Strategic Thinking: Formulates objectives and priorities and implements plans consistent with the long-term interests of the organization by evaluating conditions, resources, capabilities, constraints, and organizational goals and values. Note: If you are a member of the SES or have been certified through successful participation in an OPM approved SES Candidate Development Program (SESCDP), or have SES reinstatement eligibility, you must attach proof (e.g., SF-50, Certification by OPM's SES Qualifications Review Board (QRB)) of your eligibility for noncompetitive appointment to the SES. See "Required Documents" section for additional information. Major duties and responsibilities include, but are not limited to: Serves as the Deputy Chief Information Security Officer (CISO) and senior advisor to the Department of War Chief Information Security Officer on Department wide cybersecurity matters. Formulates and executes strategic cybersecurity governance frameworks, policies, procedures, and operational priorities to protect department-wide information systems, networks, and critical infrastructure, while driving decisions that align initiatives with overarching mission capabilities. Provides direction and oversight for implementation of the Cybersecurity Framework functions of Identify, Protect, Detect, Respond, and recover across the Department. Ensures cybersecurity efforts are aligned with department mission requirements and national security objectives. Advises the CISO and senior department leaders on significant cybersecurity risks, vulnerabilities, and emerging threats. Recommends actions to address identified risks while balancing cybersecurity requirements with operational and mission needs. Provides strategic direction and oversight for Defensive Cyber Operations and related cybersecurity activities. Assesses Department-wide requirements, establishes priorities, and recommends priorities and actions to improve cyber readiness and resilience. Evaluates the effectiveness of cybersecurity programs, policies, and initiatives and recommends changes based on the performance, mission requirements, emerging threats, and Department priorities. Supports the CISO with oversight for National Security Agency (NSA) Cybersecurity Directorate's execution of the NSA Information Systems Security Program Portfolio, including development and delivery of capabilities related to: cryptographic modernization, identity management solutions, including Public Key Infrastructure, Key Management Infrastructure, Cross Domain Solutions, and post-quantum cryptography.

SAAB AktiebolagHQI 82

Want to influence the bigger picture? At Saab, you can realise amazing innovations that keep people and societies safe. Together, we can truly make an impact - and your part matters. Your role We are expanding the Information and Cyber Security organization within Business Area Surveillance and are looking for an Information Security Manager to lead our Information Security Operations team. In this role, you will ensure that information security is effectively integrated into business operations and supports the organization's strategic objectives. Leading a team of Business Information Security Officers (BISOs), you will work closely with Security Operations and business stakeholders to create a security approach that enables business success while maintaining a strong security posture. Your main tasks will be: Lead the integration of information security into business processes and operations. Drive a security culture that promotes awareness, accountability, and shared responsibility. Ensure information security requirements are translated into practical solutions that support business growth and agility. Build and maintain strong relationships with business leaders, aligning security objectives with business goals. Lead and develop a team of Business Information Security Officers (BISOs). Preferred locations for this role are Solna/Stockholm or Kallebäck/Göteborg. Your profile We are looking for a leader with a strong security background and a business-focused mindset. You are a skilled communicator who can build trust, influence stakeholders, and navigate complex organizations to achieve results. Personal qualities are highly important. You have strong integrity, sound judgment, and the ability to build lasting professional relationships. You are self-driven, collaborative, and understand how to balance information security requirements with business objectives. Required skills: Proven experience leading teams of specialist professionals. Strong strategic ability to translate organizational goals into team objectives and outcomes. Excellent analytical and problem-solving skills with a proactive approach. Strong communication, influencing, and negotiation skills in Swedish and English. Understanding of relevant regulations, standards, and best practices within Saab's industry. Experience from the defense industry, government authorities, or a global organization is highly valuable. This position requires that you pass a security vetting based on the current regulations around/of security protection. For positions requiring security clearance additional obligations on citizenship may apply. What you will be a part of Explore a wealth of possibilities. Take on challenges, create smart inventions, and grow beyond. This is a place for curious minds, brave pioneers, and everyone in between. Together, we achieve the extraordinary, each bringing our unique perspectives. Your part matters. Saab is a leading defense and security company with an enduring purpose, to help nations keep their people and society safe. Empowered by its 28,000 talented people, Saab constantly pushes the boundaries of technology to create a safer and more sustainable world. Saab designs, manufactures and maintains advanced systems in aeronautics, weapons, command and control, sensors and underwater systems. Saab is headquartered in Sweden. It has major operations all over the world and is part of the domestic defense capability of several nations. Read more about us here If you are interested in what benefits you can take part of as an employee at Saab in Sweden, you can read more about them here Kindly observe that this is an ongoing recruitment process and that the position might be filled before the closing date of the advertisement.

BettermentHQI 82

About Betterment Betterment is a leading, technology-driven financial services company that offers investing, savings and retirement solutions for retail investors and investment advisors as well as financial wellness solutions, including a 401(k) for small and medium-sized businesses. Our team is passionate about our mission, to empower people to build wealth with confidence and ease. We're headquartered in NYC and offer hybrid NY-based positions (four days/week in-office, with no required office days during the summer and winter holidays). About the Role We are looking for a Senior Information Security professional with deep experience in governance, risk, and compliance to serve as a senior individual contributor on our Govern & Control team. You will own and mature the risk management processes that underpin the trust we hold with clients, investors, and regulators, and you will raise the bar for the analysts around you. As a technology-driven financial services company, managing information security risk is critical. This role operates within our Govern & Control team, a small, independent second line-of-defense function integrated with the broader security program. The role reports to the Director of Information Security and partners closely with security teams in engineering, lines of business across the company, and other risk functions including Compliance and Legal. As the senior analyst on the team, you will set standards for how the work is done, mentor other analysts, and act as a trusted advisor to stakeholders and leadership. This role is based out of our NYC office. Below we've reflected the base salary range for this position. Actual salaries may vary depending on factors including but not limited to location, experience, and performance. The range listed is just one component of Betterment's total compensation package for employees. • New York City: [170,[phone removed],000] This job may also be eligible for variable compensation in the form of a company incentive bonus. A Day in the Life • Leads major program areas with limited supervision, such as vulnerability management, third-party risk, identity theft oversight, business continuity and disaster recovery, or issues management, and is accountable for their outcomes and Key Results (OKRs). • Leads risk assessment processes end to end, including the hardest and highest-stakes ones, and documents summarized risk conclusions substantiated by data. Sets the template other analysts follow. • Designs and documents complex internal controls, which may include building reports or automation. AI and automation tooling is available to scale this work, and you are expected to drive that leverage. • Provides effective challenge, primarily to partners in Engineering, and partners with Compliance and Security Engineering to mature risk processes and reduce risk (new tools, processes, or reporting practices). • Uses professional judgment and quantifiable methods to measure risk, and drives decisions on accepting or treating risk within our appetite. • Independently authors high-quality updates to policies and procedures, and owns program-level and KRI reporting to leadership and governance committees. May serve in a leadership role (Chair or Secretary) for a governance committee. • Acts as escalation point and reviewer for the work of more junior analysts, raising the consistency and quality of the team's output. • Follows regulatory changes and industry trends closely, maps them to Betterment's business, and stays engaged in the professional community. What We're Looking For We are seeking a senior team member who will be a force multiplier for the security program. Required: • 6+ years of experience in security GRC, technology risk, technology audit, or security operations, including demonstrated senior-level ownership. • Expert-level depth in at least one security domain (for example vulnerability management, SDLC, application security, or cloud computing), paired with broad horizontal skills across the business. This is the "T-shaped" profile we expect at this level. • Deep, hands-on command of security risk management: the CIA triad, control design and operation, and one or more control governance frameworks (for example SOC 2, ISO 27001, NIST CSF). • Strong command of security controls for cloud computing and third-party SaaS, including logical access management, third-party due diligence and ongoing monitoring, and vulnerability governance. • Fluency in the structure and content of audit reports and risk assessments, including audit and assessment control testing with appropriate sampling and results reporting. • Ability to use professional judgment and quantifiable methods to measure risk, and to drive stakeholders to sound risk acceptance or treatment decisions within appetite ("effective challenge"). • Strong cross-disciplinary communication and relationship building, with a track record of influencing without authority across Engineering, business, Compliance, and Legal. • Moderate understanding of financial services operations and of Product/Engineering. • Experience learning and applying new skills quickly, including through research and the use of AI and automation. Encouraged: • Professional designations such as CISSP, CISA, CISM, AWS Cloud certifications, or other (encouraged, not required). • Experience in regulated financial services, and with audits or regulatory examinations. • Experience mentoring analysts or auditors, or leading a governance committee. Join a team built on these core values We change lives Be a part of a community of innovators working to transform financial outcomes for real people. Your work will make an impact, always laddering up to our mission; to empower people to build wealth with confidence and ease . We set audacious goals We set them for the company, our customers, and ourselves, and we won’t stop until we reach them. We don’t just show up; we give our all, then celebrate our wins. We value all perspectives When we collaborate, we're at our best. We believe diverse perspectives lead to better outcomes and strive to uphold our supportive and inclusive community. We simplify financial services We’re financial services pioneers, always finding new ways to improve, optimize, and enhance. Constant improvement is in our DNA. Our Commitment to Your Total Well-being: • We offer a competitive suite of benefits , including medical, dental, and vision coverage; life and AD&D insurance; short- and long-term disability; infertility support and WPATH-aligned transgender health benefits; an Employee Assistance Program (EAP); transit benefits and FSA and HSA options • Ownership: Equity for all employees, including new hire and refresher grants. • Time: Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in your sixth year. • Growth: Company-paid professional coaching for all employees. • Wealth: Day-one 401(k) match plus matching on qualified student loan payments. What happens next We’ll take a few weeks to review all applications. If we’d like to spend more time with you, we’ll reach out to arrange next steps, which will include 3-4 sets of meetings with your future colleagues. In the interview process, we’ll look to learn more about your skills, experiences, capabilities, and motivators. Many of our questions will be aimed at understanding how you might operate here at Betterment. Depending on the role, we may ask you to complete a case study exercise or technical assessments, as we want to collect a robust set of data points to better inform our decisions. On average, it takes us around 3-5 weeks to make a hiring decision, depending on your availability and sense of urgency. As a best practice, we aim to interview at least 2-3 final round candidates before making a hiring decision. Please note that, as we usually receive an overwhelming number of applications for open positions, we’re unable to offer individual feedback during the interview process. We recognize that interviewing for a new role is a big deal. We appreciate you considering Betterment as the next step in your career, and our Recruiting Team is here to support and advocate for you through the interview process! Betterment is dedicated to providing accommodations to candidates upon request. If you need accommodations at any point throughout the interview process, please reach out to your recruiter. Please note that in any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Come join us! We’re an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, religion, creed, national origin or ancestry, ethnicity, sex, gender (including gender nonconformity and status as a transgender or transsexual individual), sexual orientation, marital status, age, physical or mental disability, citizenship, past, current or prospective service in the uniformed services, predisposing genetic characteristic, domestic violence victim status, arrest records, or any other characteristic protected under applicable federal, state or local law.

BvnkHQI 83

About us: BVNK is the stablecoin-powered financial stack for enterprises. We're now part of Mastercard, and together we're building a network for every form of money – one that delivers more reach, more capability and more choice. We enable businesses to build financial products, unlock new markets, and move money in seconds across 130+ countries, with 40+ licenses for fiat and digital assets globally. Processing billions annually, we empower enterprises worldwide to send, receive, convert, and settle stablecoins and fiat seamlessly through a single integration. Our mission is to accelerate global money movement, and we're assembling a world-class team to make it happen. Trusted by industry leaders like Corpay, Worldpay, Deel, and Flywire, we deliver the infrastructure that makes new forms of money usable within the financial systems customers already rely on today. By combining Mastercard's global payment reach and trusted networks with BVNK's stablecoin infrastructure, we're building the trusted operating layer for the evolution of money movement, helping customers participate in emerging digital networks without having to rebuild their businesses around every new innovation. We're a diverse team spread across EMEA, North America, and APAC, with a shared belief that stablecoins are the new infrastructure layer for financial services, and that BVNK is at the forefront of this shift. We're incredibly honored to have been recognized by: • CNBC World's Top Fintech Companies (2026) • FXC Intelligence Top 100 Cross-border Payment Companies (2026) • Newsweek's The Top 100 Global Most Loved Workplaces (three years running, most recently 2025) • LinkedIn as one of the Top 20 Startups in the UK (2025) About this role in the team: We're looking for a Chief Information Security Officer (CISO) based in Singapore to establish and lead BVNK's information security function in Singapore. As our first dedicated security hire in Singapore , you'll have the opportunity to build the local security function from the ground up. You'll hold senior accountability for information security across our Singapore business, establishing the governance, frameworks, controls and capabilities required to operate securely, meet our regulatory obligations and support the business as it scales. You'll report to our Singapore CEO , with a functional reporting line into our Global Chief Security Officer . You'll work closely with both local leadership and BVNK's global Security organisation, ensuring our Singapore security programme meets local regulatory requirements while remaining closely aligned with BVNK's global security strategy, standards and controls. This is a hands-on, individual contributor role. You'll be BVNK's primary point of contact with MAS and other Singapore regulators, owning the documentation, submissions, audit facilitation and day-to-day regulatory engagement that keeps our Singapore licences in good standing. Key Areas of Responsibilities: • Ensure BVNK's Singapore operations remain compliant with MAS technology risk, data protection and operational resilience requirements , working with global security teams who own the technical delivery. • Own and lead the implementation of the information security strategy and programme for BVNK's Singapore business based on the global standards. • Build the Singapore security function by establishing the necessary governance, policies, standards, controls and processes required to support a regulated financial services business. • Act as the senior point of accountability for information and cyber security in Singapore, providing clear oversight of the global security functions and reporting to the Singapore CEO and relevant governance forums, setting up KPIs, SLAs, dashboards, and regular reports. • Ensure BVNK's Singapore operations meet applicable MAS technology risk , cyber security and operational resilience requirements. • Establish and maintain an effective information security risk management framework, ensuring material security risks are identified, assessed, managed and appropriately escalated. • Work closely with the Global CSO and wider global Security organisation to implement BVNK's global security standards while identifying and addressing Singapore-specific requirements. • Own the regulatory and legal dimensions of security incident management, knowing when and how to notify MAS, meeting notification SLAs, preparing post-incident reports and managing the regulatory relationship through to closure. • Advise Product and Business teams on what new products and services require from a Singapore regulatory perspective, ensuring local compliance obligations are met before launch. • Support the information security aspects of regulatory applications, examinations, audits and assessments, working closely with Risk, Compliance, Legal, and Technology. • Establish appropriate security governance, metrics and reporting, providing the Singapore leadership team with clear visibility of the organisation's security posture and key risks. • Oversee information security risks associated with third parties and critical technology service providers. • Build security awareness and accountability across the Singapore organisation, ensuring colleagues understand their responsibilities in protecting BVNK and our customers. • Represent BVNK's Singapore security function with regulators, auditors, partners and other external stakeholders where required. What we need from you: • Strong knowledge of the Singapore financial services regulatory environment , with experience working with MAS technology risk, cyber security and operational resilience expectations. • Significant experience in senior information security, cyber security or technology risk leadership roles within regulated financial services, payments, banking or fintech with demonstrated increase of complexity between roles. • Bachelor or equivalent degree in information security, technology, audit or similar discipline. • Security certifications like CISSP, CISM, CISA will be considered an advantage. • Understanding of the Singapore privacy regulations and their application in financial and fintech services, while experience in a company operating on a global scale is considered an advantage. • Strong knowledge across security governance, technology risk, regulatory compliance, audit facilitation and incident management from a legal and compliance perspective. • Experience engaging with regulators and supporting regulatory applications, examinations, audits and security assessments. • The ability to translate complex technical and regulatory requirements into pragmatic controls and clear business decisions. • Strong executive-level stakeholder management skills, with the credibility to advise senior leadership and challenge decisions where appropriate. • Experience working within an international organisation and collaborating effectively with global security and technology teams. • Excellent written and verbal communication skills, with the ability to communicate security risk clearly to technical and non-technical audiences. • Experience with GRC platforms like Vanta, Drata or similar tools will be considered an advantage. What you can expect from us : - Fair and competitive salary at every stage of your growth as a product manager - Flexible working hours, with hybrid working at its heart - A MacBook and the accessories you need - A culture built on passionate growth minded people - A flexible approach to holiday - Opportunities to travel to our offices around the world, in locations such as London and Cape Town, to collaborate with your colleagues - An open and creative environment where you can help us define the future of BVNK, it’s culture, and it’s opportunity sets *At BVNK, we are focused on building a diverse and inclusive team. While you may not meet all of our requirements, we’d encourage you to apply if you meet the majority of our expectations. This is as you may be a great fit for this role or another role in our team.*

Office of the Secretary of the InteriorHQI 83

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race, sex, color, religion, or national origin. To meet the minimum qualifications, you must submit a two-page resume (max) that shows you possess the Executive Core Qualifications (ECQs) and two Technical Qualifications (TQs). To be considered, only the first 2 pages of your resume will be reviewed to determine your eligibility/qualifications. Technical Qualifications (TQs) are designed to assess an applicant's experience relevant to the specific position requirements. Your resume should clearly demonstrate your experience and accomplishments related to the two TQs below: TQ1 - Enterprise cybersecurity program leadership. Demonstrated technical expertise and executive experience leading an information security program for a large, complex, geographically dispersed organization, spanning policy, risk management, and operations. TQ2 - Cyber defense operations at scale. Demonstrated experience directing threat detection, incident response, vulnerability management, and continuous monitoring, including coordination with CISA/Equivalent and external partners. ECQ 1-Commitment to the Rule of Law and the Principles of the American Founding: Demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. ECQ 2 - Driving Efficiency: Demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. ECQ 3 - Merit and Competence: Demonstrated knowledge, ability, and technical competence to effectively and reliably produce work that is of exceptional quality. ECQ 4 - Leading People: Demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. ECQ 5 - Achieving Results: Demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors. Qualifications will be evaluated based on how clearly and concisely you emphasize your level of responsibilities, the scope and complexity of your programs; services managed; program accomplishments; policy initiatives undertaken; level of contacts; the sensitivity and criticality of the issues addressed; and the results of your actions taken. Typically, experience will have been gained at the GS-15 or equivalent in the private sector or non-governmental organizations.Already SES Certified? If you are currently serving under a career Senior Executive Service appointment, are eligible for reinstatement into the Senior Executive Service, or have completed a Senior Executive Service Candidate Development Program (SES CDP) approved by OPM, you only need to submit a two-page resume and personnel action showing you have held a career SES position. SES CDP graduates must submit a two-page resume and a copy of their CDP program certification with their package. The position is located in the Office of the Chief Information Officer (OCIO) at the Department of the Interior (Department) and reports to the Chief Information Officer. The incumbent carries out the following specific responsibilities: Set enterprise security strategy. Define company-wide security policy, standards, and risk tolerance, working closely with the CIO and system owners. Run the risk management program. Stand up and mature a structured, framework-based approach to identifying, assessing, and treating risk across all systems. Own the enterprise risk register and drive remediation plans to closure. Own system security assessment and approval. Decide which systems are cleared to go live and stay live, backed by continuous monitoring rather than point-in-time checkpoints. Drive the Zero Trust roadmap. Move the organization toward least-privilege access, strong identity and access management, and phishing-resistant multifactor authentication. Lead threat detection and incident response. Own the security operations center (SOC), endpoint detection and response (EDR), enterprise logging maturity, and the incident response process - including meeting mandatory external breach-reporting deadlines. Govern core security hygiene. Vulnerability and patch management, penetration testing, secure configuration baselines, and encryption of data at rest and in transit. Secure the supply chain. Lead third-party/vendor and software supply-chain security, including software bill of materials (SBOM) practices, and enforce security requirements for cloud service providers. Protect operational technology. Oversee security for industrial control systems and SCADA environments - a first-order concern given the physical infrastructure (dams, hydropower generation) this organization operates. Report on the program. Deliver security metrics and regular reporting to leadership and external oversight bodies, and support independent annual security audits and audit responses. Build the security workforce and budget. Own the cyber talent strategy, role-based and security-awareness training, and lead security budget and investment planning with the CIO and finance leadership. Be the principal cybersecurity advisor and spokesperson to senior leadership, oversight bodies, and external government and partner organizations. Shape the organization's position on emerging security policy and technologies - including critical-infrastructure protection and AI-enabled systems - and ensure the organization meets or exceeds recognized industry and regulatory security standards. Hold the organization accountable for following the security program, and ensure major incidents are escalated and reported on time. Engage the broader community. Collaborate with peer CISOs, cross-industry and interagency security councils, and working groups on emerging issues in cybersecurity, AI security, and privacy. Lead the security organization the operationally, coordinating closely with infrastructure and business system operational entities, privacy, records, and data governance functions to ensure high performing and reliable platforms and systems, and keep privacy and security governance integrated Partner on AI security. Work with the Chief AI Officer and AI teams to manage AI-related security risk, secure AI model development, and use AI to strengthen security operations. Manage the team. Own workforce planning, headcount, and organizational structure for all security staff, including remote and hybrid employees. If your resume does not include these basic qualifications, you will not be determined qualified for this position. We recommend that your resume includes examples that are clear, concise, and emphasize their level of responsibilities, the scope and complexity of the programs, activities, or services managed; program accomplishments; policy initiatives undertaken; level of contacts; the sensitivity and criticality of the issues addressed; and the results of actions taken.