IT Specialist (INFOSEC)

***IMPORTANT***
This vacancy uses a two-phase application process. This is Phase 1 of 2 for this vacancy. To be considered for this position you must complete both phases of the application process.

Phase 1: You must first complete and submit your application under this announcement.

Phase 2: After this announcement closes eligible applicants will receive an email containing an exclusive link to a separate competency assessment announcement. You must use that link to complete and submit Phase 2.

You must submit a résumé under both announcements and both announcements must show Application Submitted for your application to be considered complete. You will receive application status updates only under the Phase 1 announcement.

Additional instructions for completing the competency assessment will be provided in the Phase 2 announcement. Phase 2 is expected to take at least one hour to complete.

Failure to complete and submit both Phase 1 and Phase 2 will result in an incomplete application and removal from further consideration.

• Be responsible for all security RMF activities for the system(s) and/or service(s) they are appointed to throughout SDLC. Typical ISSO responsibilities include assisting in the development of the system security plan ensuring compliance with that plan and managing the security aspects and day-to-day security operations of the appointed information system(s) and/or service(s). These tasks may include but are not limited to access management auditing configuration management physical security personnel security incident handling security training and awareness and meeting Federal Risk and Authorization Management Program (FedRAMP) requirements (if applicable).
• Ensure that all data privacy records management and other applicable requirements for the protection of sensitive and mission critical information (e.g. Controlled Unclassified Information - CUI Personally Identifiable Information - PII Federal Taxpayer Information - FTI Payment Card Industry - PCI etc.) within the assigned system(s) and/or service(s) are being met and followed.
• Ensure that individuals have read and signed the applicable agreements (e.g. Rules of Behavior - ROB Non-Disclosure Agreements - NDA etc.) and completed any required role-based training before accessing the assigned system(s) and/or service(s) and/or sensitive information.

• All newly appointed employees to the competitive (or excepted) service are subject to a probationary (or trial) period. During this time your performance conduct and suitability for continued employment will be evaluated. You will not automatically convert to permanent status at the end of the probationary (or trial) period. Your supervisor must affirmatively determine that continued employment is in the best interest of the Federal service. If no certification is made before the probationary (or trial) period ends your appointment will be terminated. You are encouraged to actively engage with your supervisor seek feedback and understand role expectations. Additional guidance and support will be provided during onboarding.
• Complete a Declaration for Federal Employment to determine your suitability for Federal employment at the time requested by the agency.
• Have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer.
• If you are a male applicant born after December 31 1959 certify that you have registered with the Selective Service System or are exempt from having to do so.
• Go through a Personal Identity Verification (PIV) process that requires two forms of identification from the Form I-9. Federal law requires verification of the identity and employment eligibility of all new hires in the U.S.
• Obtain and use a Government-issued charge card for business-related travel.
• File a Confidential Financial Disclosure Report within 30 days of appointment and annually from then on.
• This position requires that the successful candidate undergo personnel vetting which includes a background investigation and enrollment upon onboarding into Continuous Vetting. Enrollment in Continuous Vetting will result in automated record checks being conducted throughout ones employment with Treasury. The successful candidate will also be enrolled into FBIs Rap Back service which will allow Treasury to receive notification from the FBI of criminal matters (e.g. arrests charges convictions) involving enrolled individuals in near real-time. For more information about individual rights Noncriminal Justice Applicants Privacy Rights - FBI FD-258 Privacy Act Statement - FBI and ().

Key Requirements:

1. Please refer to Conditions of Employment.
2. Click Print Preview to review the entire announcement before applying.
3. Must be U.S. Citizen or U.S. National

You must meet the following requirements by the closing date of this announcement.

The experience may have been gained in either the public private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience please indicate dates of employment by month/day/year and indicate number of hours worked per week on your résumé.

For the GS-13 you must have one year of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized Experience for this position includes: Specialized Experience for the GS-13 you must have one year (full 52 weeks) of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized experience for this position includes:

-Experience as an Information System Security Officer or equivalent role responsible for the security of systems applications or cloud services following the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) or comparable cybersecurity standards; AND
-Experience maintaining security documentation assessing security controls tracking findings or vulnerabilities including the development and execution of remediation actions and/or risk mitigations or exceptions; AND
-Experience coordinating with system owners security personnel cloud service providers and technical teams on audits assessment incident response configuration reviews change reviews or cloud security reviews.

In addition to meeting specialized experience individuals must meet proficiency levels in each of the following competencies:
Attention to Detail Customer Service Decision Making Information Management Interpersonal Skills Oral Communication Problem Solving Teamwork and Technical Competence.

A competency assessment will be used to determine whether you meet the required competency proficiency levels. Once this announcement closes eligible applicants will receive an email containing an exclusive link to access and complete Phase 2 of the application process.

For the required proficiency levels and competency definitions please see the following link: Competency-Based Qualification Standard for the Information Technology Management Series 2210