Applicants must meet eligibility and qualification requirements by the closing date of this announcement. Time in grade restrictions do not apply to Direct Hire procedures.
Basic Requirements: Individuals must have IT-related experience demonstrating each of the four competencies listed below:
Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
AND
Specialized Experience:
In order to be deemed as qualified, candidates must have one year of specialized experience which is equivalent to the GS-13 level in the Federal service. Specialized experience is defined as follows:
1. Experience providing technologically advice and guidance to management regarding cybersecurity risks to an organization's information technology (IT) assets (data, networks, and applications) while performing as a technical and policy ISSM.
2. Experience coordinating ongoing cybersecurity inspections, tests, and reviews to improve the effectiveness of IT security goals and objectives and reduce overall organizational risk.
3. Experience developing and interpreting policies, procedures and strategies and making recommendations to improve the delivery of information security services throughout an organization.
4. Experience identifying information security problems/issues, be they technical, policy or procedure based, and recommending improvements and changes to prevent recurrences.
5. Experience using GRC tools to identify and mitigate risks within information systems/boundaries.