Chief Information Security Officer, NB-2210-VIII

Clarification from the agency

U.S. Citizens and U.S. Nationals; No prior Federal experience is required.

As a Chief Information Security Officer, you will:

• Serve as the OCC's Chief Information Security Officer (CISO) and Chief Privacy Officer. Lead current and anticipated agency initiatives to ensure appropriate information security measures to protect sensitive bank and agency information by directing the implementation of the OCC's enterprise information security/cybersecurity and privacy program.
• Oversee development of new information security/cybersecurity strategies, methodologies, tools, technologies and concepts to initiate and oversee special initiatives, project and review that further enhance the cybersecurity posture at the OCC.
• Develop and maintain information security policies and procedures to perform periodic testing, implement controls, and assess risks and ensure information systems reliability and accessibility, and to prevent unauthorized access to systems, networks, and data, with the objective to continuously improve OCC information system/cybersecurity efficiency and effectiveness.
• Maintain liaison with other federal agencies, industry groups, and vendors to keep abreast of new information technology and cybersecurity developments with potential impact on OCC programs. Represent OCC at meetings and conferences with respect to OCC IT security and privacy.
• Through subordinate senior-level personnel, lead, motivate and develop the staff in the organization; evaluate and look for ways to improve the production and quality of work produced within the office: develop performance standards and evaluate performance in accordance with OCC guidelines.
• As a member of the Information Technology & Security executive leadership team, be responsible for development and implementation of strategic plans, goals, and objectives.

Conditions of employment

This position requires that the successful candidate undergo personnel vetting, which includes a background investigation and enrollment upon onboarding into "Continuous Vetting." Enrollment in Continuous Vetting will result in automated record checks being conducted throughout one's employment with Treasury. The successful candidate will also be enrolled into FBI's Rap Back service, which will allow Treasury to receive notification from the FBI of criminal matters (e.g., arrests, charges, convictions) involving enrolled individuals in near real-time.

There are three key documents that contain important information about your rights and obligations. Please read and retain these documents:

1. Noncriminal Justice Applicant's Privacy Rights, for those who undergo an FBI fingerprint-based criminal history record check for personnel vetting, which includes Rap Back,
2. FD-258 Privacy Act Statement - FBI (this is the same statement used when your fingerprints are submitted as part of your background investigation), and
3. SEAD-3-Reporting-U.pdf (dni.gov), (applicable to those who hold a sensitive position or have eligibility for access to classified information).

• Complete a one-year probationary period (unless already completed).
• Complete a one-year supervisory or managerial probationary period (unless already completed).
• Complete a background investigation (unless already completed).
• Complete a Declaration for Federal Employment to determine your suitability for Federal employment.
• Have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer.
• Go through a Personal Identity Verification (PIV) process that requires two forms of identification from the Form I-9. Federal law requires verification of the identity and employment eligibility of all new hires in the U.S.
• Travel occasionally to attend conferences and/or training.
• Obtain and use a Government-issued charge card for business-related travel.
• Complete a financial disclosure review and resolve any ethics issues.
• Click here for important information about OCC ethics standards, such as the requirement that new hires divest their bank securities.
• Successfully complete a background investigation that includes criminal history, financial history (including a credit check) and other information.
• Obtain and maintain a Top Secret/Sensitive Compartmented Information security clearance.

Qualifications

You must meet the following requirements by the closing date of the announcement:

You must have one year of specialized experience at a level of difficulty and responsibility equivalent to the NB-VII band level or GS-15 grade level in the Federal service. Examples of specialized experience for this position include:

• Leading organization-wide cybersecurity and privacy programs including developing and executing cybersecurity vision, strategy, policy, and operations.
• Directing security and privacy governance, oversight, compliance, and risk management activities,
• Leading verification and validation of security controls and implementation of federal security and privacy requirements, such as FISMA and the Privacy Act of 1974.
• Advising executive leadership on information security, privacy, and enterprise risk.

The experience may have been gained in the public sector, private sector, or through volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis.

To receive any credit for your work experience, please indicate dates of employment by month/year, and indicate the number of hours worked per week, on your resume.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

You will be evaluated for this job based on how well you meet the qualifications above.

Your application package includes your resume, responses to the online questions, and required supporting documents. Please be sure that your resume includes detailed information to support your qualifications for this position; failure to provide sufficient evidence in your resume may result in a "not qualified" determination.

Once the announcement closes, we will conduct a review of your application package to verify your eligibility and qualifications. If you are found qualified, your application will move forward to additional phases of the review process.

Minimum Qualifications: Once the application process is complete, Human Resources or Subject Matter Expert (SME) will review the first two pages of your resume and supporting documentation to determine whether you meet the minimum job qualifications.

Resume Evaluation Panel Review: After it has been determined that you meet the minimum qualifications, Subject matter experts (SMEs) may review the first two pages of your resume to determine your technical qualifications for this position based on the required competencies. Additional documentation (e.g., cover letter, links embedded in your resume) may not be considered.

Your application and resume should demonstrate that you possess the following competencies. Do not provide a separate narrative written statement. Rather, you must describe in your resume how your past work experience demonstrates that you possess the competencies identified below. Use specific examples of employment or experience contained in your resume and describe how this experience has prepared you to successfully perform the duties of this position.

Rating:

Your application package will be evaluated in the following areas:

• Cybersecurity/Information Security
• IT Performance Assessment & Systems
• IT Project/Program Management
• Oral Communication
• Written Communication
• Problem Solving
• Decisiveness
• Developing Others
• Influencing/Negotiating
• Human Resources Management
• Internal/External Awareness
• Partnering
• Strategic Thinking
• Vision

Rule of Many: This announcement uses the Mechanism C method under 5 CFR § 332.402. All applicants tied at the cut line will be referred. We will provide the selecting official a sufficient number of names, when available, to consider at least three candidates per vacancy. If fewer than three eligible and available candidates per vacancy result, we will expand the group in accordance with our pre-announced supplement strategy and OPM policy.

Application of Veterans' Preference: If you are a preference eligible candidate, you will be listed ahead of non-preference eligibles with the same score. Preference eligibles with a compensable service-connected disability of 10 percent or more are listed at the top of the certificate in the order of their ratings.

Referral: If you are among the top qualified candidates, your application may be referred to a selecting official for consideration. You may be required to participate in a selection interview.

A complete application package includes: 1) A resume, 2) vacancy question responses, and 3) submission of any required documents. Please note that if you do not provide all required information, as specified in this announcement, you may not be considered for this position (or may not receive the special consideration for which you may be eligible). Note: Please ensure that all bank, financial, and other confidential or sensitive information is removed/redacted from each document.

RESUME: All applicants are required to submit a resume by either creating one in USAJOBS or uploading one of their own choosing. Please limit your resume to two-pages. Applicants with resumes exceeding two-pages will be removed from consideration. To receive any credit for relevant experience, please list the month/year and number of hours worked for experience listed on your resume. We suggest you preview the online questions, as you may need to customize your resume to ensure that it supports your responses to these questions. Please review Resume Tips.

VETERANS DOCUMENTATION: If you are claiming veteran's preference, you must submit a copy of your DD-214 showing type of separation and character of service (e.g. DD-214 Member 4 Copy) and if applicable, VA letter. Ten-point preference eligibles must also submit an Application for 10-point Veteran Preference, SF-15, along with required documentation listed on the back of the SF-15 form. Current Active Duty members must submit a certification of expected discharge or release from active duty under honorable conditions dated within 120 days after the certification is submitted by the applicant. The certification letter should be on letterhead of the appropriate military branch of the service and contain (1) the military service dates including the expected discharge or release date; and (2) the character of service. You can find additional information about Veterans' Preference at http://www.fedshirevets.gov/.

CAREER TRANSITION ASSISTANCE PLAN (CTAP) or INTERAGENCY CAREER TRANSITION ASSISTANCE PLAN (ICTAP) DOCUMENTATION: If you are a displaced or surplus Federal employee, click CTAP/ICTAP for eligibility and a detailed list of required documents.

OPTIONAL DOCUMENTS: In addition, you may submit the following:

• Cover letter
• Recent performance evaluation (be sure to redact/remove all sensitive information prior to submitting)

Next steps

Additional locations