Chief Information Security Officer (Cybersecurity)

As a Chief Information Security Officer ES 2210 00 your typical work assignments may include the following:

Provides executive oversight and strategic direction on Information Security and makes GAO aware of risks and vulnerabilities not yet enumerated by GAO during the normal course of operating its systems and enables the agency to enhance its security posture.

The CISO is a senior leadership position that is responsible for integration of all internal agency information security activities.

Identifies creates implements and evaluates all GAO programs to ensure concurrence with federal Cybersecurity laws and regulations to include being the strategic and tactical leader for data policy and technology products.

Provides subject matter expertise to GAO Executive Committee and mission teams on cyber related matters and manages IT incident response procedures.

Oversees and recommends a comprehensive state-of-the-art program to assess whether GAO has implemented an adequate and effective cybersecurity program and partnerships have been established to protect agency information technology (IT) systems and critical infrastructure from cyber threats and vulnerabilities.

Oversees timely impactful and innovative cybersecurity and IT audits of data and systems maintained by or on behalf of GAO and its Operating Divisions.

Analyzes and facilitates the sharing of timely reliable and actionable information regarding cybersecurity threats vulnerabilities incidents and responses with a view toward protecting against those risks mitigating damage from incidents and limiting contagion across systems and networks.

Develops and mentors staff through onboarding open communication training and development opportunities and performance management processes. Builds and maintains a highly motivated responsive and proactive workforce possessing required competencies. Fosters a diverse and inclusive workplace.

must be a U.S. citizen
2. You will be required to submit a financial disclosure statement.
3. You must be suitable for a top-secret security clearance.
4. Registered for Selective Service if applicable. ().
5. Completion of a 1-year supervisory SES probationary period.
You must meet all qualification requirements before the announcement closes.

Minimum Qualifications: The Senior Executive Service (SES) appointments require one year (52 weeks) of specialized experience at the next lower band/grade at the GS-14/GS-15 level PE band level III PT band levels III and IV MS band levels I and II Senior Executive Service Senior Level (SL) or equivalent in the Federal Service or comparable private/public sector.

Executive Core Qualifications (ECQs): The ECQs assess executive experience and potential. They measure whether you have the executive skills needed to succeed in a variety of Senior Executive Service positions. ECQs can be submitted outside of the resume as additional documentation. Please address the following ECQs listed below.

*NOTE*: For current SES applicants or applicants who have previously held an SES appointment ECQs can be resume based.
For applicants who has not held a previous SES appointment ECQs are required (essay-based) responses for each ECQ is required to submitted as additional documentation outside of the resume.

• Leading Change: This core qualification involves the ability to bring about strategic change both within and outside the organization to meet organizational goals. Inherent to this ECQ is the ability to establish an organizational vision and to implement it in a continuously changing environment.
• Leading People: This core qualification involves the ability to lead people toward meeting the organizations vision mission and goals. Inherent to this ECQ is the ability to provide an inclusive workplace that fosters the development of others facilitates cooperation and teamwork and supports constructive resolution of conflicts.
• Results Driven: This core qualification involves the ability to meet organizational goals and customer expectations. Inherent to this ECQ is the ability to make decisions that produce high quality results by applying technical knowledge analyzing problems and calculating risks.
• Business Acumen: This core qualification involves the ability to manage human financial and information resources strategically.
• Building Coalitions: This core qualification involves the ability to build coalitions internally and with other federal agencies state and local governments nonprofit and private sector organizations foreign governments or international organizations to achieve common goals.