Duties
As a Chief Information Security Officer , ES, 2210, 00, your typical work assignments may include the following:
Provides executive oversight and strategic direction on Information Security and makes GAO aware of risks and vulnerabilities not yet enumerated by GAO during the normal course of operating its systems and enables the agency to enhance its security posture.
The CISO is a senior leadership position that is responsible for integration of all internal agency information security activities.
Identifies, creates, implements and evaluates all GAO programs to ensure concurrence with federal Cybersecurity laws and regulations to include being the strategic and tactical leader for data, policy, and technology products.
Provides subject matter expertise to GAO Executive Committee and mission teams on cyber related matters and manages IT incident response procedures.
Oversees and recommends a comprehensive, state-of-the-art program to assess whether GAO has implemented an adequate and effective cybersecurity program and partnerships have been established to protect agency information technology (IT) systems and critical infrastructure from cyber threats and vulnerabilities.
Oversees timely, impactful, and innovative cybersecurity and IT audits of data and systems maintained by or on behalf of GAO and its Operating Divisions.
Analyzes and facilitates the sharing of timely, reliable, and actionable information regarding cybersecurity threats, vulnerabilities, incidents, and responses with a view toward protecting against those risks, mitigating damage from incidents, and limiting contagion across systems, and networks.
Develops and mentors staff through onboarding, open communication, training and development opportunities and performance management processes. Builds and maintains a highly motivated, responsive, and proactive workforce possessing required competencies. Fosters a diverse and inclusive workplace.
Requirements
Conditions of employment
1.You must be a U.S. citizen
2. You will be required to submit a financial disclosure statement.
3. You must be suitable for a top-secret security clearance.
4. Registered for Selective Service, if applicable. (www.sss.gov).
5. Completion of a 1-year supervisory SES probationary period.
You must meet all qualification requirements before the announcement closes.
Qualifications
Minimum Qualifications: The Senior Executive Service (SES) appointments require one year (52 weeks) of specialized experience at the next lower band/grade at the GS-14/GS-15 level, PE band level III, PT band levels III and IV, MS band levels I and II, Senior Executive Service, Senior Level (SL), or equivalent in the Federal Service, or comparable private/public sector.
Executive Core Qualifications (ECQs): The ECQs assess executive experience and potential. They measure whether you have the executive skills needed to succeed in a variety of Senior Executive Service positions. ECQs can be submitted outside of the resume as additional documentation. Please address the following ECQs listed below.
*NOTE*: For current SES applicants or applicants who have previously held an SES appointment, ECQs can be resume based.
For applicants who has not held a previous SES appointment ECQ's are required (essay-based) responses for each ECQ is required to submitted as additional documentation outside of the resume.
- Leading Change: This core qualification involves the ability to bring about strategic change, both within and outside the organization, to meet organizational goals. Inherent to this ECQ is the ability to establish an organizational vision and to implement it in a continuously changing environment.
- Leading People: This core qualification involves the ability to lead people toward meeting the organizations vision, mission, and goals. Inherent to this ECQ is the ability to provide an inclusive workplace that fosters the development of others, facilitates cooperation and teamwork, and supports constructive resolution of conflicts.
- Results Driven: This core qualification involves the ability to meet organizational goals and customer expectations. Inherent to this ECQ is the ability to make decisions that produce high quality results by applying technical knowledge, analyzing problems, and calculating risks.
- Business Acumen: This core qualification involves the ability to manage human, financial, and information resources strategically.
- Building Coalitions: This core qualification involves the ability to build coalitions internally and with other federal agencies, state and local governments, nonprofit and private sector organizations, foreign governments, or international organizations to achieve common goals.
Technical Qualifications: All applicants must meet the Technical Qualifications and Executive Core Qualification requirements listed above to be eligible for consideration. Eligibility will be based on a clear demonstration that the applicants training, and experience are of the scope, quality, and level of responsibility sufficient to successfully perform the duties and responsibilities of this executive position.
TQ-1 Knowledge of IT security theories and concepts, practices, and emerging issues; and IT Security and concepts sufficient to oversee the efficient and effective lifecycle management of agency-wide enterprise information security services and solutions while ensuring value in transforming, re-engineering, and/or supporting mission operations and service delivery.
TQ-2 Ability to secure the cooperation of others at all levels to accomplish requirements in the face of frequently conflicting and often controversial program goals. Successful performance requires an executive with the highest talent, supervisory ability, organizational skills and depth and breadth in IT Infrastructure operations management.
TQ-3 Ability in the management and utilization of the personnel within the Office and to integrate the management of GAO and operating contractors in directing programs or isolating problems affecting progress and coordination of IT programs, and for arriving at workable solutions to a variety of complex and interrelated problems.
TQ-4 Ability to interpret broad and complex IT policy and procedures, both to and from higher authority and to succinctly present requirements, orally and in writing.
TQ-5 Knowledge of related regulations, laws, and orders (e.g. Clinger-Cohen Act, Performance and Results Act, IT related Presidential Directive/Executive Orders, and the Federal Information Security Management Act).
Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
Education
This job does not have an education qualification requirement.
Additional information
Update your resume so it meets new resume requirements
Starting on September 27, 2025, federal agencies will only accept resumes up to two pages in length to comply with the Merit Hiring Plan. USAJOBS will not allow you to upload or build resumes longer than two pages, and you will need to update the resumes in your profile before applying to a job.
What is required in the resume?
Resumes submitted for federal jobs are required to have:
- Contact Information-your name and the best way to contact you.
- Relevant work experience-Job experience should include employer name, job title, start and end dates (month/year), the number of hours worked per week and descriptions that explain how your previous work experience relates to and helps you meet the required qualifications in the GAO job announcement to which you are applying.
- Education, certifications or licensures-If the job announcement requires any education, certifications or licensures, make sure you include the required information on the resume.
For more information on the how to check the resume for the new 2-page requirement, please go to the Help Center or click the link : USAJOBS Help Center - Update your resume now so it meets new resume requirements
This is a not bargaining unit position.
OPTION FOR ADDITIONAL SELECTIONS: Based on the staffing needs, additional selections may be made through this vacancy announcement.
Travel and relocation expenses will not be paid for by the GAO.
REASONABLE ACCOMMODATION: GAO provides reasonable accommodations to applicants and employees with disabilities. To request accommodation, please email
ReasonableAccommodations@gao.gov.The U.S. Government Accountability Office's policy is to provide equal employment opportunity for all regardless of race, religion, color, sex (including pregnancy), national origin, age, disability, genetic information, sexual orientation, or gender identity.
The U.S. Government Accountability Office's policy is to provide equal employment opportunity for all regardless of race, religion, color, sex (including pregnancy), national origin, age, disability, genetic information, sexual orientation, or gender identity.
Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Review our benefits
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
How you will be evaluated
You will be evaluated for this job based on how well you meet the qualifications above.
If you meet the qualification requirements stated above, you will be further rated based on your responses to the vacancy questions. Please make sure that your responses to the vacancy questions are supported in your resume. Please follow all instructions carefully. If you provide incomplete answers, fail to provide a narrative response to any vacancy question(s) that requires further explanation, or if your response to a vacancy question is "see resume", your rating may be affected or you may be determined ineligible.
Your qualifications will be evaluated on the following competencies (knowledge, skills, abilities and other characteristics):