Associate Chief Information Officer for Security Operations

As Associate Chief Information Officer for Security Operations, you will:

• Lead a cross-functional team of Departmental stakeholders to identify and implement protective controls that minimize Treasury's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale.
• Operate a set of technical capabilities that ingest signal from internal sensors (e.g., endpoint agents, proxies, firewalls, packet capture, netflow) and capture telemetry from external sources (e.g., vulnerability scans, vulnerability disclosures, third parties). to identify threats.
• Oversee all activities as captured in the Departmental incident response plan, including but not limited to incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions. The incumbent shall use digital forensics to support these activities.
• Oversee and manage the Security Operations Center budget. Lead the work of a subordinate a hybrid staff of federal/contracted practitioners and specialists that are focused on ensuring the confidentiality, integrity, and availability of all Treasury's classified and unclassified systems.
• Communicate to the Deputy Administrator, Treasury Chief Information Officer and Treasury Chief Information Security Officer, and other program and policy officials regarding Treasury's active defense activities. Provides authoritative recommendations and solutions to problems and challenges with respect to federal mandates/legislation, risk management, and improvement of operational capabilities.

Conditions of employment

• U.S. Citizenship is required.
• A one-year SES probationary period is required, if not previously completed.
• An initial SES career appointment becomes final only after the individual successfully completes a 1-year probationary period.
• Must successfully complete personnel security vetting (e.g., investigation, evaluation, and adjudication).
• Complete a Declaration for Federal Employment to determine your suitability for Federal employment, at the time requested by the agency.
• Must have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer
• If you are a male applicant born after December 31, 1959, certify that you have registered with the Selective Service System or are exempt from having to do so.
• Go through a Personal Identity Verification (PIV) process that requires two forms of identification from the Form I-9. Federal law requires verification of the identity and employment eligibility of all new hires in the U.S.
• File a Confidential Financial Disclosure Report within 30 days of appointment and annually from then on.
• Disclosure of Political Appointments.
• Veterans' preference is not applicable to the Senior Executive Service.
• All qualification requirements must be met by the closing date of this announcement.

Qualifications

Applicants must meet all qualifications and eligibility requirements by the closing date of this announcement.

To meet the minimum qualifications for the position of Associate Chief Information Officer for Security Operations, applicants must possess the Executive Core Qualifications listed below. Typically, qualified applicants will have gained experience of this nature at or above the (GS)-15 grade level or its equivalent in the public or private sector. To be qualified for this position, your resume must reflect experience in a managerial capacity. Typically, experience of this nature is gained at or above the GS-15 grade level in the Federal service, or its equivalent with state or local government, the private sector, or nongovernmental organizations. As such, your resume must demonstrate that you have the knowledge, skills, and abilities to successfully fulfill responsibilities inherent in most SES positions such as:

• Directing the work of an organizational unit;
• Accountability for the success of one or more specific programs or projects;
• Monitoring progress toward organizational goals and periodically evaluates and makes adjustments to such goals;
• Supervising the work of employees (other than personnel assistants) at least 25% of the time; or
• Exercising important policy-making, policy-determining, or other executive functions

Applicants seeking initial career appointment to the Senior Executive Service (SES) must clearly demonstrate the ability to meet the ECQs within their two (2) page resume (any experience exceeding 2 pages will not be reviewed). OPM's Guide to the Senior Executive Services Qualifications provides detailed information on the ECQs.

In addition to meeting the minimum qualifications, you must also demonstrate the following Executive Core Qualifications (ECQs) and Mandatory Technical Qualifications (MTQs):

EXECUTIVE CORE QUALIFICATIONS (ECQs): By statute, OPM prescribes ECQs for the appointment of career SES members. The ECQs were designed to evaluate executive experience and not technical expertise. The following ECQs provide the focus for certification of executive core qualifications for initial appointment to the Senior Executive Service. Your two-page resume should show that you possess the Executive Core Qualifications.

ECQ 1 - Commitment to the Rule of Law and the Principles of the American Founding: Demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. Leadership Competencies: Knowledge of the American System of Government, Commitment to the Rule of Law, Civic-Mindedness.

ECQ 2 - Driving Efficiency: Demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. Leadership Competencies: Fiscal Responsibility, Managing Resources, Leveraging Technology.

ECQ 3 - Merit and Competence: Demonstrated knowledge, ability, and technical competence to effectively and reliably produce work that is of exceptional quality. Leadership Competencies: Technical Skill, Problem Solving, Agility and Resilience.

ECQ 4 - Leading People: Demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. Leadership Competencies: Accountability, Developing Others, Executive Judgement.

ECQ 5 - Achieving Results: Demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors. Leadership Competencies: Operational Mindset, Innovation, Strategic Thinking.

Additional information about the SES and ECQs can be found on the Office of Personnel Management (OPM) SES Website: Executive Core Qualifications.

MANDATORY TECHNICAL QUALIFICATIONS (MTQs): In addition to the ECQs, candidates must address MTQs. MTQs are designed to assess an applicant's experience relevant to the specific position requirements. All applicants must clearly demonstrate in their two-page resume, experience and accomplishments related to the MTQs below:

MTQ 1 - IT Security Operations Center (SOC): Demonstrated experience in leading and managing functions of day-to-day operations of a Security Operation Center (SOC), which provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions systems.

MTQ 2 - IT Incident Response: Demonstrated executive knowledge of and experience in IT Incident Response. Demonstrated experience leading operations for a portfolio of enterprise IT Incident Response activities such as incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions.

MTQ 3 - IT Threat Defense: Demonstrated experience in IT Threat Defense in terms of leading a cross-functional team of stakeholders to identify and implement protective controls that minimize an organization's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale.

Please DO NOT submit separate documents addressing the ECQs or MTQs.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

**************ALL DOCUMENTS MUST BE UPLOADED IN PDF FORMAT*******************

The Qualifications Documents must be formatted using Times New Roman, size 12 font, with 1-inch margins. Do not use borders, provide photos, or list a Social Security Number on any of the Qualifications Documents.

1. RESUME: The new SES hiring process requires applicants to submit a two (2)-page resume (only the first 2 pages will be reviewed to determine your eligibility/qualifications), which includes information regarding your professional experience and accomplishments that demonstrate you meet the ECQs and required MTQ. If you submit more than two pages, the remainder of the pages will not be reviewed nor considered.

Your resume MUST contain specific information that can be used to make a qualification determination, including employment beginning and ending dates for each position, whether employment is Full-time or Part-time, or average number of hours worked per week, and position titles. If the position is/was in the Federal government, you will need to provide the position series and grade level. The resume should show relevant experience and education, as well as support the required specialized experience.

Note: Applications must be presented in a font size and font style that is legible, preferably Times New Roman font, no less than 12-point size with no less than half an inch margin all around.

2. VACANCY QUESTION/ASSESSMENT QUESTIONNAIRE RESPONSES: Responses are automatically submitted through USA Jobs when you apply to this vacancy.

3. ADDITIONAL REQUIRED DOCUMENTS: Applicants are required to submit the following supporting documentation if applicable:

• SF-50: Current & former federal employees must submit a SF-50 which shows your eligibility status. We recommend submitting your current SF-50 or most recent SF-50. DO NOT submit an award SF-50 as these often do not verify eligibility. Current Career Senior Executives and individuals with SES reinstatement eligibility must submit a copy of a SF-50 which shows career SES status.
• Candidate Development Program Certificate: SES Candidate Development Program (SESCDP) graduates that have not been appointed to the SES must submit a copy of their OPM QRB Certification. This document should be uploaded under the "other document type" field.
• Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently or have been within the last five (5) years, a political Schedule A, Schedule C, Noncareer SES or Presidential Appointee employee in the Executive Branch, you must disclose this information on your resume and to the Human Resources Office.

Next steps