IT SPECIALIST (INFOSEC)

About this role

GS 11: I have one year of specialized experience equivalent to the next lower grade level (GS-09) or pay band in the federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: 1) Providing security analysis of IT activities to ensure that appropriate security measures are in place and being enforced; 2) Ensuring plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessment, audits, inspections, etc; 3) Collecting and maintaining data needed to meet system cybersecurity reporting consisting of Risk Management Framework (RMF), and Assessment and Authorization (A&A) process; 4) Proficiency in all forms of communication, including listening, speaking, expressing new ideas or difficult concepts; and writing in order to write clear and concise functions documentation, program specifications, training and user support.

GS 12: I have one year of specialized experience equivalent to the next lower grade level (GS-11) or pay band in the federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: 1) Applying information systems security principles and methods to evaluate, implement, and disseminate information systems security tools and procedures. 2) Ensuring effective implementation of organizational information systems, security regulations, and policies and maintaining compliance with higher level requirements; 3) Applying knowledge of the DoD Risk Management Framework (RMF), developing RMF documentation for customers, and providing technical review of assessment materials in support of organizational system and application authorization; 4) Documenting the Assessment and Authorization (A&A) information in a comprehensive RMF package to include all of the information connected with the assessment of the Security Plan (SP); 5) Executing test plans and Validation Procedures to obtain test results and advising the site or system owner of any issues; and 6) Recommending mitigation measures to reduce risk.

Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/ OR https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-b/ .