Information Technology Specialist (Information Security)

Full Job Description

About the Position: This position is located at the Joint Pathology Center in Silver Spring, Maryland. The role is primarily sedentary office work involving extended periods of computer use.

The work environment consists of a collaborative office setting.

Standard duty hours are 8:00 AM to 4:30 PM, though it may require participation in scheduled shift coverage or on-call support to maintain operational cybersecurity oversight.

Who May Apply: Only applicants who meet one of the employment authority categories below are eligible to apply for this job.

You will be asked to identify which category or categories you meet, and to provide documents which prove you meet the category or categories you selected.

30 Percent or More Disabled Veterans Current Civilian Employees of the Defense Health Agency (DHA) Current Department of Defense (DOD) Civilian Employee (non-Army) Current Permanent Department of Defense (DoD) Civilian Employee Domestic Defense Industrial Base/Major Range and Test Facilities Base Civilian Personnel Workforce Executive Order (E.O.) 12721 Interagency Career Transition Assistance Plan Land Management Workforce Flexibility Act Military Spouses, under Executive Order (E.O.) 13473 Non-Appropriated Fund Instrumentality (NAFI) Non-Department of Defense (DoD) Transfer Office of Personnel Management (OPM) Interchange Agreement Eligible People with Disabilities, Schedule A Priority Placement Program, DoD Military Reserve (MR) and National Guard (NG) Technician Eligible Priority Placement Program, DoD Military Spouse Preference (MSP) Eligible Priority Placement Program, DoD MR and NG Preference Eligible Tech Receiving Disability Retirement Priority Placement Program, DoD Retained Grade Preference Eligible Reinstatement Veterans Employment Opportunity Act (VEOA) of 1998 In order to qualify, you must meet the education and/or experience requirements described below.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social).

You will receive credit for all qualifying experience, including volunteer experience.

Your resume must clearly describe your relevant experience; if qualifying based on education, your transcripts will be required as part of your application.

Additional information about transcripts is in this document.

Basic Requirement for Information Technology Specialist (Information Security): Specialized and Other Experience: One year of specialized experience which includes developing, establishing, and publishing organization-wide Information Security (INFOSEC) policies, procedures, and guidance; identifying, assessing, and analyzing security threats, system vulnerabilities, and potential risks to information systems and networks; recommending mitigation strategies to reduce risk and improve overall system security posture; and implementing, monitoring, and enforcing logical access control mechanisms to ensure only authorized users can access network resources, systems, and sensitive information.

This definition of specialized experience is typical of work performed at the next lower grade/level position in the federal service (GS-11).

The specialized experience must include, or be supplemented by, information technology related experience (paid or unpaid experience and/or completion of specific, intensive training, as appropriate) which demonstrates each of the four competencies, as defined: (1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Examples of IT-related experience demonstrating this competency include: completing thorough and accurate work independently, even in the most difficult or stressful situations; occasionally reviewing work completed by others.

(2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Examples of IT-related experience demonstrating this competency include: resolving routine and non-routine problems, questions, or complaints; developing and maintaining strong, mutually supportive working relationships with customers; conducting evaluation of support to determine quality of services and customer satisfaction, and recommending procedural changes based on customer need or changes in policy and/or regulation.

(3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Examples of IT-related experience demonstrating this competency include: convincingly conveying complex information to customers; presenting thoughts that are well-organized and demonstrating confidence in the facts and ideas; adjusting style when working with individuals with different levels of understanding; using various methods to explain and convey information.

(4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Examples of IT-related experience demonstrating this competency include: solving complex or sensitive problems by developing and proposing strategic alternatives; identifying possible conflicts and shared benefits; helping team anticipate problems and identifying and evaluating potential sources of information; providing feedback and coaching to others to help solve problems; engaging appropriate stakeholders when developing solutions in order to understand and incorporate multiple perspectives and needs; evaluating the effectiveness of decisions and adjusting future decisions as appropriate.

Some federal jobs allow you to substitute your education for the required experience in order to qualify.

For this job, you must meet the qualification requirement using experience alone--no substitution of education for experience is permitted.

Time in Grade Requirement: Applicants who have held a General Schedule (GS) position within the last 52 weeks must have 52 weeks of Federal service at the next lower grade or equivalent (GS-11).

Major Duties:

• Monitors and provides cybersecurity guidance to the organization - Joint Pathology Center.
• Reviews risk assessments and analyze impact of potential vulnerabilities through the use of approved cybersecurity tools.
• Prepares, distributes, and maintains plans, instructions, guidance, and standard operating procedures (SOPs) on the security of cybersecurity automated operations.
• Serves as the lead IT professional to manage the RMF accreditation process/package.
• Serves as the lead agent to progress the MTF enclave through the RMF Authority to Operate (ATO)accreditation and certification process.
• Takes action to correct Cybersecurity deficiencies. Refers deficiencies that cannot be corrected locally to higher command levels.
• Oversees the execution of the cybersecurity training and cyber awareness program.
• Responsible for performing or supporting forensics analysis resulting from cybersecurity violations, unexplained IS performance anomalies, incidents, or classified data spills.