Information System Security Officer (ISSO)

Oversee information system security activities for the U.S. Department of Education’s Federal Student Aid within the Security Services Division.

Responsibilities

• Oversee implementation of IT security controls and security authorization documents to ensure the system meets mandated security policies and requirements.
• Conduct security analysis of IT activities to verify security measures are in place, enforced, and remediated as needed .
• Identify possible security violations, follow required incident reporting procedures, and take corrective action to address cybersecurity incidents.
• Ensure system modifications, acquisitions, and outsourcing efforts include information security requirements aligned with organizational goals.
• Continuously validate the system against applicable policies, guidelines, procedures, regulations, and laws to maintain compliance.

Requirements

• US Citizen .
• Males 18 and over must be registered with the Selective Service .
• Must complete a Background Investigation and Fingerprint check.
• Must be determined suitable for federal employment .
• Relocation expenses will not be paid .
• May be subject to a one-year probationary period .
• As a condition of employment, may be required to serve a probationary or trial period to evaluate fitness and whether continued employment advances the public interest.
• Must meet all qualification requirements within 30 days of the closing date of the vacancy announcement.
• Experience can include paid and unpaid work, including volunteer work through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social).
• Education cannot be substituted for experience for this position and grade level.

Salary and Location

• Salary: USD 106,437 - 172,980 per year
• Location: San Francisco, CA ( onsite )
• Minimum experience: 1 year

Job Details

• Position: Information System Security Officer (ISSO)
• Organization: U.S. Department of Education (ED), Federal Student Aid (FSA), Chief Technology Division , Security Services Division
• Grade/Class: IT Specialist (INFOSEC) “Information System Security Officer (ISSO)” GS-2210-13

Duties and Qualification Timing

• Application limit: limited to the first 200 applications received.
• Announcement closes at 11:59PM Eastern Time on the day the 200th application is received, or on the listed closing date, whichever occurs first.

Minimum Qualification Requirements

• You may meet the minimum qualifications for GS-13 with specialized experience, education, or a combination of both.
• Specialized Experience for GS-13: One year of experience (federal or non-federal) equivalent to at least a GS-12 performing 2 out of 3 duties:
  • Conduct cybersecurity risk assessments and support Security Assessment and Authorization process efforts.
  • Ensure vulnerabilities and Plans of Actions and Milestones (POA&Ms) are processed timely and remediation plans are in place.
  • Support implementation and functionality of security requirements and IT policies and procedures aligned with the organization’s mission and goals.
• For GS-12/13/14/15 levels, applicants may qualify by meeting/exceeding the minimum proficiency level for required competencies in addition to the specialized experience requirement.
• Must have IT-related experience (paid or unpaid and/or completion of specific intensive training such as IT certification) demonstrating each of the nine competencies listed in the announcement.

Knowledge, Skills, and Abilities (KSAs)

• Knowledge of cybersecurity risk management processes (assessing and mitigating cybersecurity risks).
• Knowledge of cybersecurity and privacy principles, vulnerabilities, impacts of cybersecurity lapses, and applicable business processes of customer organizations.
• Knowledge of vulnerability information dissemination sources (alerts, advisories, errata, bulletins) and incident response and handling methodologies.
• Ability to integrate cybersecurity requirements into system modification processes using applicable baseline security controls and support robust software quality control.
• Skill in researching, selecting, interpreting, modifying, and applying guidelines adapted to specific cybersecurity problems or issues.

Benefits

• Comprehensive benefits package for federal employees (eligibility depends on position type).
• Excused leave for Parent/Teacher Conferences (3 hours ).
• Excused leave for annual health screenings (4 hours ).
• Matching leave for community volunteer service.
• Alternative work schedules (flexibilities may be available).
• May be eligible for a recruitment incentive (requires a service agreement to remain with the U.S. Department of Education for a specified period).
• May be eligible for a relocation incentive (requires a service agreement to remain with the U.S. Department of Education for a specified period).
• May be eligible to participate in the Student Loan Repayment Program as a recruitment incentive (requires a service agreement to remain with the U.S. Department of Education for a specified period).

Eligibility / Who Can Apply

• Public: U.S. Citizens, Nationals, or those who owe allegiance to the U.S.
• Career transition (CTAP, ICTAP, RPL): Federal employees whose job, agency, or department was eliminated and are eligible for priority over other applicants.
• Clarification from the agency: announcement is open to all U.S. Citizens.
• Clarification from the agency: position may be filled through the Direct Hire Authority for IT Specialist positions.
• Clarification from the agency: Category Rating, Veterans Preference, Schedule A, and traditional rating and ranking do not apply to this vacancy.

Required Documents

• Resume demonstrating education, experience, training and accomplishments related to qualifications and substantiating responses to the occupational questionnaire.
• Limit resume to 2 pages with font size no smaller than 10 points ; if more than 2 pages, only the first 2 pages will be reviewed.

Additional Information

• Employees may receive detail assignments to agencies in support of interagency agreements (IAAs).
• Condition of Employment: probationary or trial period may be required to evaluate fitness; upon completion, employment is terminated unless continued employment advances the public interest (certification required in writing).
• Veterans’ Career Counseling: View email address on click.appcast.io.
• Student Loan Default: verification that you have not defaulted on any loan funded or guaranteed by the U.S. Department of Education.
• Suitability and Investigation: complete the Declaration for Federal Employment (OF-306) and successfully complete a pre-appointment investigation/background check.
• Essential/Non-Essential: position considered non-essential for purposes of reporting to work during federal government closures.
• Financial Disclosure: this position does not require financial disclosure.
• Bargaining Unit: not included in the bargaining unit.
• Selections: broad authority to hire from any appropriate source of eligibles; may make additional selections within 90 days ; may share selection certificates among program offices.
• Reasonable Accommodation Requests: request a RA for USA Hire Competency Based Assessments; decisions are case-by-case; assessments must be completed within 48 hours of receiving the URL.
• If unable to apply online, request info about Alternate Application process using contact information provided in the announcement.