Summary
This Senior Executive Service position is in the Department of Homeland Security (DHS), Federal Emergency Management Agency (FEMA), Office of the Chief Information Officer, located in Washington, D.C.
The Chief Information Security Officer is responsible for the information security requirements of the Agency by ensuring confidentiality, integrity, and availability of systems, networks, and data.
This job is open to
Clarification from the agency
All groups of qualified individuals - ALL US CITIZENS
Duties
The Chief Information Security Officer (CISO) is responsible for performing and supervising work that involves applying analytical processes to the planning, design, and implementation of new and improved information systems to meet the mission requirements of the Agency's lines of business and administrative programs and safeguards systems from cyber threats in accordance with federal laws and regulations. This role executes the planning and delivery of secure, high-quality enterprise application services for FEMA personnel and stakeholders.
In addition, the CISO, provides the security architectural planning and delivery of information technology (IT) services across the enterprise and in support of FEMA program offices and regions. FEMA operates extensive IT capabilities (day-to-day, emergency, fixed, and mobile) including its own switched telecommunications and data networks, satellite systems, wireless systems, and complex automated applications integral to FEMA program missions. FEMA's IT capabilities are intra/inter-agency and inter-governmental in scope but are managed under the leadership of the CIO.
Primary Duties:
Serves as the Senior Advisor to the CIO regarding development, publication, and implementation of Agency cybersecurity (information security) policies, standards, and guidance, as well as coordination, integration, training, and enforcement of all aspects of the Agency's cybersecurity program, consistent with guidance and direction from the U.S. Department of Homeland Security and in compliance with applicable laws, regulations, directives, and standards.
Leads the Agency's implementation of all applicable regulatory requirements including the Computer Security Act, Federal Information Technology Acquisition Reform ACT (FITARA), Federal Information Security Management Act (FISMA), the Clinger-Cohen Act, relevant Office of Management and Budget (OMB) circulars and memoranda, Executive Orders, and Presidential Directives, as well as Congressional direction.
Demonstrates leadership in guiding FEMA's cybersecurity program and informing Agency-wide information technology acquisitions. The incumbent provides daily management and oversight of the Office of the Chief Information Security Officer and its Division(s). Responsible for planning and implementing the Agency-wide cybersecurity enhancement initiatives, following all applicable laws, directives, policies, and directed actions and providing methodologies, tools, guidance, and subject-matter expertise to help ensure FEMA's cybersecurity programs can meet federal compliance and reporting requirements. The incumbent is also responsible for a balanced, robust, and secure information environment for FEMA systems.
Responsible for planning and implementing the Agency-wide cybersecurity enhancement initiatives, following all applicable laws, directives, policies, and directed actions and providing methodologies, tools, guidance, and subject-matter expertise to help ensure FEMA's cybersecurity programs can meet federal compliance and reporting requirements. The incumbent is also responsible for a balanced, robust, and secure information environment for FEMA systems.
Effectively develops and communicates the cybersecurity strategy throughout the Agency and drives the implementation of the Agency's strategic information security management plan, including coordination with stakeholders in FEMA directorates, offices, and regions.
Utilizes a full range of strategic management and leadership skills and understands, explains, and presents complex technical ideas to both technical and non-technical audiences at all levels up to the highest in a persuasive and convincing manner. Exercises broad and deep IT knowledge coupled with equivalent knowledge of the activities of those organizations that use and exploit IT. Communicates the potential impact of emerging security technologies on organizations as well as individuals and analyzes the risks of using or not using such technologies. Assesses the impact of legislation and actively promotes cybersecurity compliance. Takes the initiative to keep both his/her own and subordinates' skills current and maintains an awareness of developments in cybersecurity and other IT-related disciplines.
Responsible for program management, organizational change, coordination, communication, policy, and oversight. Provides planning guidance for cybersecurity priorities within the Agency to all designated IT personnel, including System Owners, Information System Security Officers, and Information System Security Managers throughout the Agency, to ensure a common, comprehensive approach to securing information and IT systems and applications used to support FEMA goals and objectives.
Requirements
Conditions of employment
- You must be a U.S. citizen to apply for this position.
- Males born after 12/31/1959 must be registered for Selective Service.
- You may be required to undergo periodic drug testing.
- You must be able to obtain/maintain the required security clearance.
- Selectee will be required to complete form OGE-278, Executive Personnel Financial Disclosure Form.
- You will serve a one-year probationary period unless you previously completed the probationary period in the SES.
- You must submit to a pre-employment drug test.
Qualifications
Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race, sex, color, religion, or national origin.
To meet the minimum qualification requirements for this position, you must show that you possess the Executive Core Qualifications (ECQ) and Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit, will not be reviewed beyond page 2 or may be disqualified. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position.
TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications.
TQ 1: Enterprise Cybersecurity Strategy and Risk Management: Demonstrated experience developing, implementing, and leading an enterprise cybersecurity strategy and risk management program within a large, complex, or federated organization. This includes establishing cybersecurity governance, policies, standards, performance measures, and risk management processes; aligning security initiatives and investments with mission priorities and federal mandates; modernizing enterprise cybersecurity through approaches such as Zero Trust, secure cloud adoption, dynamic testing for continuous monitoring and assessment, and risk-based vulnerability management; overseeing system authorization; managing significant cybersecurity budgets, programs, contracts, and workforce requirements; and advising senior executives on cyber risk, resource tradeoffs, and enterprise security posture.
TQ 2: Cyber Operations, Incident Response, and Resilience: Extensive experience leading cybersecurity operations in large, complex environments, including management or oversight of a security operations center; incident detection, analysis, response, recovery, and reporting; coordination of response and mitigation activities during significant cyber incidents and emerging threats; and integration of technical, operational, and executive stakeholders to strengthen operational resilience, continuity of operations, and organizational readiness.
EXECUTIVE CORE QUALIFICATIONS (ECQs): In addition to the Technical Qualification Requirements listed above, all new entrants into the Senior Executive Service (SES) under a career appointment will be assessed for executive competency against the following five mandatory ECQs. If your 2-page resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for the position.
There are five ECQs:
ECQ 1: Commitment to the Rule of Law and the Principles of the American Founding - This core qualification requires a demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people.
ECQ 2: Driving Efficiency - This core qualification involves the demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades.
ECQ 3: Merit and Competence - This core qualification involves the demonstrated knowledge, ability and technical competence to effectively and reliably produce work that is of exceptional quality.
ECQ 4: Leading People - This core qualification involves the demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable.
ECQ 5: Achieving Results - This core qualification involves the demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors.
Note: If you are a member of the SES or have been certified through successful participation in an OPM approved SES Candidate Development Program (SESCDP), or have SES reinstatement eligibility, you do not need to address the (5) ECQs in your resume. In lieu of, you MUST attach proof (e.g., SF-50, Certification by OPM's SES Qualifications Review Board (QRB)) of your eligibility for noncompetitive appointment to the SES.
Education
There is no recognized education to qualify for this position; applicant's resumes and supporting documentation will be acceptable.
Additional information
Permanent Change of Duty Station (PCS) Expenses may be authorized at Management's discretion.
This is a Non-Bargaining Unit position.
Veteran's Preference does not apply to the Senior Executive Service.
All candidates must be able to deploy with little or no advance notice to anywhere in the United States and its territories for an extended period of time. If selected, you will be subject to 24-hour on-call in the event of an emergency. In this event, this service may include duties other than those specified in the official position description. Selectee must be able to relocate to emergency sites with little advance notice and function under intense physical and mental stress.
Background Investigation: You must undergo and successfully complete a background investigation in order to obtain a Top-Secret w/Sensitive Compartmented Information (TS/SCI).
Mobility: Organizational and geographical mobility is essential in developing and managing SES leaders. Individuals selected for SES positions members may be subject to reassignment across geographical, organizational, and functional lines, and may be required to sign a Reassignment Rights and Obligation Agreement.
Drug Testing: You must submit to a drug test prior to your appointment and random drug testing while you occupy the position.
Equal Employment Opportunity (EEO) Policy Statement: http://www.eeoc.gov/federal/index.cfm
Employment Information Resources - Resource Center: https://help.usajobs.gov/how-to
Males born after 12-31-1959 must be registered or exempt from Selective Service (see https://www.sss.gov/RegVer/wfRegistration.aspx)
OPM must authorize any employment offers made to current or former (within the last 5 years) political Schedule A, Schedule C, or Non-career SES employees in the executive branch. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, or Noncareer SES employee in the executive branch, you must disclose that to the Human Resources Office.
DHS uses e-Verify, an Internet-based system, to confirm the eligibility of all newly hired employees to work in the United States. Learn more about E-Verify, including your rights and responsibilities.
If you receive a conditional offer of employment for this position, you will be required to complete an Optional Form 306, Declaration for Federal Employment, and to sign and certify the accuracy of all information in your application, prior to entry on duty. False statements on any part of the application may result in withdrawal of offer of employment, dismissal after beginning work, fine, or imprisonment.
The Fair Chance to Compete for Jobs Act prohibits the Department of Homeland Security and its Components from requesting an applicant's criminal history record before that individual receives a conditional offer of employment. In accordance with 5 U.S. Code § 9202(c) and 5 C.F.R § 920.201 certain positions are exempt from the provisions of the Fair Chance to Compete Act. Applicants who believe they have been subjected to a violation of the Fair Chance to Compete for Jobs Act, may submit a written complaint to FEMA-Misconduct@fema.dhs.gov.
Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Review our benefits
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
How you will be evaluated
You will be evaluated for this job based on how well you meet the qualifications above.
A multi-step process is used to evaluate and refer applicants:
1. Minimum requirements: Once the application process is complete, your resume and supporting documentation will be reviewed to ensure the education requirement (if applicable) has been met and that your 2-page resume minimally demonstrates the required Executive Core Qualifications (ECQs) and Technical Qualifications (TQs). You will be rated "not qualified" if you do not possess the education and qualification requirements for the position. If your application is incomplete or your resume exceeds the 2-page limit, you will be found "ineligible".
2. Rating and Ranking: If you are found to be minimally qualified, the Rating and Ranking panel will review your resume and evaluate your qualifications for this position.
3. Interview Panel: If the Rating and Ranking panel rate you as highly-qualified, your resume will be referred to an Interview Panel for consideration, where you may undergo one or more interviews. From there, you may be referred to the selecting official for further consideration.
Upon selection, if not already a member of the SES serving under a career appointment or have been certified through successful participation in an OPM approved SES Candidate Development Program, the individual selected must have his/her executive qualifications certified by the U.S. Office of Personnel Management's SES Qualifications Review Board (QRB) before appointment to this position. The selected individual's application will be forwarded to the OPM for review and certification by the QRB, unless the selectee provides evidence of their noncompetitive status (i.e., a current SES, OPM QRB certified SESCDP graduate, or SES reinstatement eligible). Upon QRB certification, the selected individual will be required to serve a one-year probationary period. For more information regarding the SES, go to https://www.opm.gov/policy-data-oversight/senior-executive-service/.
Your supporting documents are an integral part of the process for determining your qualifications for the position. If your responses are not supported by your resume, you will be eliminated from consideration. After reviewing your resume and supporting documentation, if a determination is made that you have inflated your qualifications or experience, you may lose consideration for this position. Incomplete or late applications will not receive further consideration.
Required Documents
A complete application includes items described below. Please note that if you do not provide all required information, as specified in this announcement, you may not be considered for this position (or may not receive the special consideration for which you may be eligible).
Please carefully review the following list to determine what documentation you need to submit. Some documents may not apply to all applicants.
1. RESUME: All applicants are required to submit a resume limited to two (2) pages (i.e., 1 page that is double-sided or 2 pages that are one-sided each) showing all relevant experience. Applicants seeking initial career appointment to the Senior Executive Service (SES) must include evidence of the ECQs and TQs. PLEASE DO NOT USE USAJOBS RESUME BUILDER.
2. VACANCY QUESTION/ASSESSMENT QUESTIONNAIRE RESPONSES: Responses are automatically submitted through USA Jobs when you apply to this vacancy.
3. ADDITIONAL REQUIRED DOCUMENTS: Applicants are required to submit the following supporting documentation if applicable:
- CURRENT OR FORMER SES MEMBERS: Must provide your SES appointment SF-50 (Notification of Personnel Action), and an SF-50 showing current career SES status or career SES reinstatement eligibility.
- SES CANDIDATE DEVELOPMENT PROGRAM (SESCDP) GRADUATES: Verification of successful completion of an OPM-approved SESCDP and OPM SES QRB certification.
- CURRENT FEDERAL CIVIL SERVICE EMPLOYEE: Must provide a copy of your Notification of Personnel Action, Standard Form 50 (SF-50) or equivalent personnel action form reflecting you are a current Federal Civil Service employee.
STRONGLY RECOMMENDED: Most recent performance evaluation.
How to Apply
To apply for this position, you must complete this application and submit any required documents specified in the Required Documents section and submit by 11:59 PM (EST) on the closing date of the announcement to receive consideration.
To begin, click Apply to access the online application. You will need to be logged into your USAJOBS account to apply. If you do not have a USAJOBS account, you will need to create one before beginning the application.
Follow the prompts to select and upload your résumé and/or other required documents to be included with your application package. You will have the opportunity to upload additional documents to include in your application before it is submitted. Your uploaded documents may take several hours to clear the virus scan process.
After acknowledging you have reviewed your application package, complete the "Include Personal Information" section as you deem appropriate and click to continue with the application process.
You will be taken to the online application which you must complete in order to apply for the position. Complete the online application, verify the required documentation is included with your application package, and submit the application.
It is applicant's responsibility to verify that information entered and uploaded, (i.e., resume and other required documents) is complete, accurate, and submitted by the closing date. Human Resources will not modify or change any part of your application.
Application packages will NOT be accepted via mail. Due to security processes, mail delivery takes approximately 2-3 weeks to process at which time the vacancy announcement will be closed, and no further consideration will be given to additional application packages.
There are three key documents that contain important information about your rights and obligations. Please read and retain these documents:
Next steps
Once the evaluation process is complete and a selection has been made, the selectee's application will be forwarded to the Office of Personnel Management (OPM) for approval by the OPM Qualifications Review Board (QRB), unless the selectee is a noncompetitive candidate that has been successfully certified by the OPM QRB.
We will notify you by email at various stages in the process. Your status will also be updated on USAJOBS throughout the process. To check your status, log on to your USAJOBS account, click on "Application Status," and then click "More Information." If you are selected, we will conduct a suitability/security background investigation.
Thank you for your employment interest in the Federal Emergency Management Agency!