Chief Information Security Officer AD-2210-00 (Senior Manager) FPL AD-00

Clarification from the agency

This announcement is open to all U.S. Citizens. This is an excepted service position. All applicants who meet the qualification requirements will be forwarded to the selecting official for further consideration. Category Rating, Schedule A and traditional rating and ranking of applicants does not apply to this vacancy.

APPLICATION LIMIT: This vacancy announcement is limited to the first 200 applications received and will close at 11:59PM Eastern Time on the day that we receive the 200 application, or at 11:59PM Eastern Time on the listed closing date, whichever occurs first.

This position is eligible for Remote/Virtual work. However, this position may fall under the Presidential Memorandum titled "Return to In-Person Work" which will require you to go into the office if you are located within 50 miles of a Department of Education facility in these locations: Washington, DC, Dallas, TX, San Francisco, CA, Seattle, WA, Kansas City, MO, Chicago, Il, Atlanta, GA, Philadelphia, PA, New York City, NY, and location is negotiable. Actual salary will be based on location of selectee. Locality pay tables available at www.opm.gov .

We encourage you to read this entire vacancy announcement prior to submitting your application.

As a Chief Information Security Officer AD-2210-00 (Senior Manager), you will be responsible for:

• Serving as the principal advisor to leadership and acts as an Authorizing Official (AO) / Designated Representative under FISMA, establishing agency-wide IT security policies, managing enterprise cyber risk, and aligning security strategies with Department and OMB mandates.
• Directing Security Operations Center (SOC) capabilities-including SIEM, network forensics, automated surveillance, and threat intelligence-to detect, analyze, and mitigate cyber threats, expedite incident response, and protect high-value assets and sensitive PII.
• Overseeing vulnerability management, Continuous Diagnostics and Mitigation (CDM), and Authority to Operate (ATO) processes across cloud/data center hosting environments and enterprise applications, while enforcing strict cybersecurity contract standards across thousands of external partners and contractors.
• Leading cybersecurity audit response and remediation across OIG, DHS, and federal oversight bodies; manages security budgets and contractor performance; and provides comprehensive executive supervision, mentorship, and workforce planning for assigned cybersecurity personnel.
• Serving as the liaison and overseer of all FISMA, Financial, Office of the Inspector General, Department of Homeland Security, and other security audits.

Conditions of employment

Condition of Employment:

As a condition of employment for accepting this position, you may be required to serve a probationary period or trial period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: - your performance and conduct; - the needs and interests of the agency; - whether your continued employment would advance organizational goals of the agency or the Government; and - whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period OR trial period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.

Remove the Key Requirements that are not applicable:

Key Requirements:

1. Must be a US Citizen.
2. Males 18 and over must be registered with the Selective Service.
3. Must complete a Background Investigation and Fingerprint check.
4. May be required to successfully complete a two-year trial period.
5. Must be determined suitable for federal employment.
6. Relocation expenses will not be paid.
7. You may be subject to serve a one-year supervisory probationary period.
8. This position is subject to drug testing.

Qualifications

Minimum Qualification Requirements

You may meet the minimum qualifications for the AD-00 (Senior Manager), if you possess the specialize experience, education, or a combination of the two.

Specialized Experience for the AD-00-(GS-15 equivalent) One year of experience in either federal or non-federal service that is equivalent to at least a AD-00 (GS-14 equivalent) performing two (2) out of three (3) of the following duties or work assignments:
1. Experience leading enterprise-wide information security programs, including strategic planning, policy development, and advising on security risks, resources, and mission requirements aligned with Federal or industry standards and mandates (e.g., FISMA, OMB A-130, NIST).
2.Experience directing and advising on enterprise risk management, security authorizations, and secure IT acquisitions compliance with security regulations, including applying RMF and SCRM to assess and mitigate risks across various IT, cloud, and vendor environments.
3. Experience providing strategic leadership and oversight of enterprise SOC and incident management programs containing critical cyber threats, including develop critical threat response, mitigation, incident response, and required reporting procedures.


Basic Experience Requirements Example (Supervisory IT Positions ):
Applicants may qualify by meeting or exceeding the minimum proficiency level established for each of the required competencies, in addition to meeting the specialized experience requirement as demonstrated through the assessment of skills. You must possess IT-related experience (paid or unpaid experience and/or completion of specific, intensive training (e.g., IT certification), as appropriate) demonstrating each of the ten competencies listed below.

1. Accountability-Holds self and others accountable for measurable high-quality, timely, and cost-effective results. Determines objectives, sets priorities, and delegates work. Accepts responsibility for mistakes. Complies with established control systems and rules. 2. Customer Service- Anticipates and meets the needs of both internal and external customers. Delivers high-quality products and services; is committed to continuous improvement. 3. Decisiveness- Makes well-informed, effective, and timely decisions, even when data are limited or solutions produce unpleasant consequences; perceives the impact and implications of decisions. 4. Flexibility- Is open to change and new information; rapidly adapts to new information, changing conditions, or unexpected obstacles. 5. Integrity/Honesty- Behaves in an honest, fair, and ethical manner. Shows consistency in words and actions. Models high standards of ethics. 6. Interpersonal Skills- Treats others with courtesy, sensitivity, and respect. Considers and responds appropriately to the needs and feelings of different people in different situations. 7. Oral Communication- Makes clear and convincing oral presentations. Listens effectively; clarifies information as needed. 8. Problem Solving- Identifies and analyzes problems; weighs relevance and accuracy of information; generates and evaluates alternative solutions; makes recommendations. 9. Resilience- Deals effectively with pressure; remains optimistic and persistent, even under adversity. Recovers quickly from setbacks. 10. Written Communication- Writes in a clear, concise, organized, and convincing manner for the intended audience.

Applicants may qualify by meeting or exceeding the minimum proficiency level established for each of the required competencies, in addition to meeting the specialized experience requirement as demonstrated through the assessment of skills. You must possess IT-related experience (paid or unpaid experience and/or completion of specific, intensive training (e.g., IT certification), as appropriate) demonstrating each of the seventeen competencies listed below.

Knowledge, Skills, and Abilities (KSAs) The quality of your experience will be measured by the extent to which you possess the following knowledge, skills and abilities (KSAs). You do not need to provide separate narrative responses to these KSAs, as they will be measured by your responses to the occupational questionnaire (you may preview the occupational questionnaire by clicking the link at the end of the Evaluations section of this vacancy announcement).
1. Knowledge of cybersecurity laws, regulations, and standards-including the Federal Information Security Modernization Act (FISMA), NIST Risk Management Framework (RMF), OMB mandates, and Authorizing Official (AO) responsibilities-to manage enterprise cyber risk and maintain Authority to Operate (ATO) across mission-critical systems.
2. Skill in directing operational cybersecurity functions, Security Operations Center (SOC) technologies (such as SIEM, network forensics, and packet capture), and incident response frameworks to detect advanced threats, mitigate vulnerabilities, and protect Personally Identifiable Information (PII) and High-Value Assets (HVAs).
3. Ability to oversee Continuous Diagnostics and Mitigation (CDM) and Information Security Continuous Monitoring (ISCM) programs, integrate security across system development lifecycles (SDLC/LMM), and enforce strict cybersecurity requirements across large-scale contractor, cloud hosting, and external partner ecosystems.
4. Skill in leading multidisciplinary technical teams, managing contractor deliverables and IT security budgets, and building strategic partnerships with executives, external oversight authorities, and audit entities (e.g., OIG, DHS, FISMA auditors) to remediate findings and achieve organizational goals.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

We use a multi-step process to review and evaluate applicants:
1. Eligibility and Minimum Qualifications
Once the vacancy announcement closes, we will review your resume and documents to determine if you meet the eligibility and minimum qualification requirements, including any required education, experience, and/or selective placement factors. You will be rated as ineligible if your application is missing any required documents. You will be rated as not qualified if you do not possess the minimum qualification requirements.
2. Rating and Ranking
If you are found to meet both the eligibility and minimum qualification requirements, we will assess the quality of your experience and the extent to which you possess the required KSAs by comparing your submitted resume and documents. You will be evaluated based on how well you meet the qualifications and competencies listed in this vacancy announcement. Your qualifications will be evaluated based on your application materials, and the result of the USA Hire Assessment(s) required for this position. You will be assessed on the following competencies.

Supervisory: Accountability, Customer Service, Decisiveness, Flexibility, Interpersonal Skills, Problem Solving, and Resilience

Based on the outcome of this evaluation, your application data may be further assessed by a Subject Matter Expert (SME) panel. If your qualifications are not substantiated by your submitted resume, you may be eliminated from receiving further consideration.
Veterans' Preference: Veterans' preference eligibles will be ranked ahead of qualified non-preference eligibles.

3. Referral and Selection

If you are found to be amongst the most highly qualified applicants, you will be referred to the selecting official. As part of the assessment and selection process, the selecting official may invite you to participate in a structured interview, check your references, and/or request that you submit a writing sample or complete a written assessment or exercise to further evaluate your qualifications for this position. If you require reasonable accommodation for any part of the interview process or written assessment or exercise, please inform the selecting official at the time of scheduling.

You must submit (required for all applicants):
1. A resume demonstrating your education, experience, training, and accomplishments as it relates to the qualifications for this position and substantiating your responses to the occupational questionnaire. Please limit your resume to 2 pages with the font size no smaller than 10 points. If your resume is more than 2 pages, only the first 2 pages will be reviewed and considered for the qualifications determination.
2. Letter of Interest.

If you are claiming Veteran's Preference, you must submit: A copy of your DD-214 that shows active service and character of discharge (Separated Members only); OR A certification of expected discharge or release from active duty under honorable conditions within 120 days from the date of application (Current Active Duty Members only); AND/OR The Application for 10-Point Veteran Preference (SF-15) AND all documents indicated on the form as proof of type of preference; AND/OR Proof of Sole Survivorship Preference (e.g., certificate of death or 100% disability as a result of serving in the armed forces).Documents for Auto-Request:

Next steps

Additional locations