Experience requirements are described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions,
Information Technology (IT) Management Series 2210 (Alternative A).
INDIVIDUAL OCCUPATIONAL REQUIREMENT:
This standard allows eligibility through meeting either the requirements specified in the section titled education or experience.
SPECIALIZED EXPERIENCE: Applicants must have at least 1 year (52 weeks) of specialized experience at the next lower broadband NH-02, equivalent to the next lower grade GS-11 or equivalent in other pay systems. Specialized experience must include which demonstrates each of the following competencies 1) Attention to detail 2) Customer Service 3) Oral Communication and 4) Problem Solving. (The experience may be demonstrated by paid or unpaid experience and/or completion of specific, intense training; for example: IT certification.)
OR
EDUCATION: Applicants must possess a bachelor's degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management, mathematics, operations research, statistics or technology management or degree that provided a minimum of 24 semester hours in one or more of the following fields identified above and required the development or adaptation of applications, systems or networks.
NOTE: You must submit a copy of your transcripts.
IDEAL CANDIDATE:
- 2 years of eMASS experience desired
- 2 years of DoD or Air Force Cybersecurity experience (WCO, ISSM, ISSO, etc.)
- 2 years' experience in Risk Management Framework and the Assess & Authorize processes (A&A)
- Candidate meets or exceeds the 8140 foundational qualification requirements for an ISSM
KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas:
- Expert knowledge of the principles, methods, and techniques of cyber, Information Technology (IT), or Information Management (IM) assessment, planning, management, monitoring, and evaluation as well as knowledge of the principles, methods, or tools for developing, scheduling, coordinating, managing cyber, IT, or IM projects and resources, monitoring and inspecting costs, work, and contractor performance. Ability to lead and manage information systems planning, development, implementation, operation, and maintenance as well as ability to make decisions or recommendations that significantly impact important agency cyber, IT, or IM policies or programs.
- Knowledge of safety and security regulations, practices and procedures.
- Knowledge of DoD/Air Force IT Information Security (INFOSEC) security requirements for Assessment and Authorization (A&A), network operations and protocols, systems testing and evaluation, and performance management methods sufficient to plan and conduct security accreditation reviews for installed systems or networks and assess and advise on new or revised security measures and countermeasures based on the results of A&A reviews.
- Expert knowledge of information technology and information security industry standards, cost-benefits analysis methods, and analysis to performance data to prepare persuasive recommendations in support of Cybersecurity requirements.
- Ability to maintain an up-to-date awareness of technological advances and predict how management can meet future requirements.
- Ability to communicate effectively, both orally and in writing.
- Knowledge of the Communications Squadron mission, internal processes, and policies.
- Knowledge of safety and security regulations, practices, and procedures.
- Ability to develop and conduct training on information security.
- Professional knowledge and experience to be able to attain or to have already attained the specified certification levels described in DoD 8570.01-M needed to carry out the performance of this position.
- Knowledge of a full range of IT security principles, concepts, practices, products and services (including systems software, database software, vulnerability and code scanning software technology), and methods for evaluating risk and vulnerability, implementing mitigating improvement, and disseminating IT security tools and procedures.
- Knowledge of IT INFOSEC security requirements for certifications leading to authority to operate, system operations and protocols, systems testing and evaluation, and performance management methods sufficient to plan and conduct security accreditation reviews for installed systems or applications and assess and advise on new or revised security measures and countermeasures based on the results of accreditation reviews.
- Ability to gather facts and use effective analytical and evaluative methods to assess information, plan the sequence of actions necessary, make sound decisions, and solve a variety of network problems; and to analyze component interrelationships and evaluate systems and computer applications from an operational perspective.
PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.
VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.