Information Technology Cybersecurity Specialist (Security)

Applicants must meet all qualifications and eligibility requirements by the closing date of the announcement including time-in-grade restrictions, specialized experience and/or education, as defined below. TIME-IN-GRADE: Current federal employees applying for a promotion opportunity must meet time-in-grade (TIG) requirement of 52 weeks of service at the next lower grade level in the normal line of progression for the position being filled. FOR THE GS-13 LEVEL: Applicants must have one year of specialized experience (equivalent to the GS-12 level) that may have been obtained in the private or public (local, county, state, Federal) sectors which demonstrates: Experience with the assessment and accreditation (commonly called C&A or A&A) process of government IT applications or general support systems. Developing and maintaining system security plans and all associated documents in accordance with National Institute of Standards and Technology Risk Management Framework (RMF) requirements. Managing resolution of Plan of Action and Milestones (POA&M) for cybersecurity controls that are not fully implemented or operating as intended. In addition, all applicants qualifying based on experience must have IT-related experience demonstrating each of the four competencies listed below. Applicants must demonstrate possession of these competencies within the body of the resume; no separate statements addressing them are required. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Note: There is no education substitution for this grade level. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

The duties may include, but are not limited to:,Serves as Subject Matter Expert (SME) for all aspects of Authorization and Accreditation of all IT and facility control systems.,Develops and maintains detailed System Security Plans and related security documentation in accordance with the Federal Information Security Modernization Act (FISMA).,Conducts security control assessments in accordance with National Institutes of Standards and Technology (NIST) Risk Management Framework (RMF) requirements.,Monitors cybersecurity controls to ensure that they continue to be implemented correctly, operating as intended and producing the desired outcome.,Opens Plan of Action and Milestones (POAM) for cybersecurity controls, develops milestones, manages the POAM process, and ensures POAMs are closed out within established time frames.,Facilitates the required system access and provides information and documentation to independent security assessment teams and external auditors.,Serves as a cybersecurity advisor, assessing the security impact of proposed system changes and notifying the system owner of changes that increase the risk to operations, assets or individuals.