IT SPECIALIST (INFOSEC/PLCYPLN)

About this role

This position requires one year of information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined: 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

In addition to experience demonstrating the four competencies above, your resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level (GG/GS-12) or pay band in the federal service or equivalent experience in the private or public sector performing duties such as: Conduct security testing to include vulnerability assessments, penetration testing, and security control validation in support of the Risk Management Framework.

Work with system owners and security personnel to identify and document security risks and recommend security controls to mitigate those risks. Develop and maintain security assessment plans and report the results of assessments to leadership and the Designated Authorizing Official (DAO). Assess the effectiveness of security controls, perform security reviews to identify gaps in the security architecture, and develop a security risk management plan.