Summary
This position is located in the Architect of the Capitol (AOC), Office of the Chief Administrative Officer (OCAO), Information Technology Division. The incumbent assists the AOC Chief Information Security Officer (CISO) with security protocols to ensure the continuity of information technology (IT) to support the business operations of the AOC.
Duties
Serves as an IT Security Specialist for applications that impact AOC programs. Reviews, develops and implements AOC-wide IT security policies, guidelines and procedures. Develops and oversees implementation and coordination of security protocols to ensure continuity of operations, protect against unauthorized access and restore IT systems and services in the event of system outage. Provides AOC-wide guidance and instructions to users to inform them of system security protocols and to warn of actions that will compromise security. Conducts audits of system operations to evaluate system security and monitor actions that are prohibited by policies, guidelines and protocols. Takes action to respond to negative findings by notifying CISO and users directly as needed. Regularly tests the functionality of and administers information systems contingency plans and disaster recovery procedures. Develops, maintains and issues documentation for IT security protocols including policy statements and user guides. Serves as Principal for the Office Inspector General (OIG) and Office of General Counsel OGC) Liaison for the AOC Information Technology Division (ITD). Leads the investigations in accordance with AOC Policy and OIG, OGC, and ITD Protocols. Use of AOC authorized tools to conduct investigations in a timely manner. Serves as Contracting Officer Representative (COR), as requested, for IT Security related contracts to ensure accurate and adequate oversight of contractor performance according to contract requirements. Performs timely inspections to ensure compliance with job specifications, quality, timeliness and budget authorizations. Utilizes a knowledge of the work breakdown structure, critical path method (CPM), the Program Evaluation and Review Technique (PERT) and Gantt chart to identify technical solutions that assist project managers and Contracting Officers in project planning, cost management, risk analysis, control and monitoring of projects. Ensures that projects are effectively inspected, monitored, controlled and evaluated within timeliness, cost and performance conditions. Assists the Contracting Officer in authorizing changes to the contract on the Government's behalf when appropriate. Reviews completed work, evaluates quality and recommends that the Contracting Officer accept or reject completed work for payment. Serves as an Information System Security Officer (ISSO) for assigned systems and a member of the Information Security Team. Assists in gathering facts and reporting on IT Security and Personally Identifiable Information (PII) Incidents and investigations upon request. Serves as the principal leader in vulnerability scan, database scan, security tool configuration and refinement. Provide PowerShell and other scripting support as necessary. Works in cross training capacity with other ISSOs. Goal is to be interchangeable with other government ISSOs as necessary.
Requirements
.
Education
Bachelor's degree in information technology is preferred, not required.
How you will be evaluated
Review your resume and responses carefully. Your eligibility for consideration and qualifications for the position will be determined based upon a review of your detailed resume and your responses to job specific self-assessment questions. Your resume will be evaluated based on evidence of your ability to demonstrate the knowledge, skills, and abilities (KSAs) for this position, possession of any specialized experience, and how well your background and experience relates to the self-assessment questions in the job announcement. The self-assessment questions relate to the following knowledge, skills, abilities, and competencies: KSA 1:Information Systems and Network Security- Monitor and enforce applicable baselines on various information systems such as servers, firewalls, routers, desktop PCs, laptops, tablets, and smartphones. KSA 2: Network Management- Identify and analyze vulnerabilities, and recommend countermeasures for the identified vulnerabilities. KSA 3: Project Management- Assist in the development and continued maintenance of applicable IT Security related documentation such as Standard Operating Procedures and Operations Manuals. KSA 4: Writing- Assist, as necessary, in review and development of IT Security related training, standard operating procedures, plans of action and milestones. Your responses to the self-assessment questions serve as the basis for your initial rating. You will receive a numerical score based on your responses to these questions. Next, your responses will be evaluated by a Human Resources Specialist and/or a subject matter expert against the information provided in your resume and optional cover letter. Your resume must support your answers to the self-assessment questions. Falsifying your background, education and/or experience is cause for non-selection or disqualification from further consideration. Please note that a complete application is required for consideration. (Please review the “Required Documents” section of this job announcement to see what must be included in a complete application). You may preview questions for this vacancy.