USA remote
Chief Information Security Officer (CISO)
About this role
Eligibility will be based upon a clear showing the applicant has training, education and experience of the scope and quality sufficient to effectively carry-out the duties of the position. Candidates must exemplify the corporate perspective, leadership vision, broad experience and character needed in the SES corps not only to satisfy the immediate vacancy, but future vacancies which will occur in a variety of organizations, functions and locations.
In accordance with the new OPM requirements to streamline Senior Executive Service (SES) hiring, applicants are no longer required to submit lengthy narrative essays, including those for Executive Core Qualifications (ECQs) or Mandatory Technical Qualifications (TQs) when applying. Instead, the initial application will be resume-only, capped at two pages. This change streamlines the application process and more closely aligns with private industry practice.
Applicants identified for potential selection will have their ECQs assessed by undergoing a structured interview with the Office of Personnel Management (OPM) Qualifications Review Board. To meet minimum qualifications requirements for this position, you must show that you possess the education, Technical Qualifications (TQ) and Executive Core Qualifications (ECQ) related to this position within your resume (not to exceed 2 pages).
Resumes over the 2-page limit will be disqualified. Your resume should include examples of experience, education and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for this position. CERTIFICATIONS: The incumbent must possess or be willing to obtain Cybersecurity Workforce Management certification (8570.01 IAM level III) or equivalent within one year of gaining the position.
TQ1: Enterprise Cybersecurity Strategy, Governance, and Risk Management Demonstrated senior executive experience leading enterprise-wide cybersecurity strategy, governance, and risk management within a large, complex organization. This includes establishing cybersecurity policies, standards, and accountability frameworks; aligning security investments and priorities with organizational mission objectives; and advising senior executives on enterprise cyber risk, risk acceptance, and resource allocation.