Chief Information Security Officer

Chief Information Security Officer (CISO)

The Chief Information Security Officer (CISO) is responsible for performing and supervising work that involves applying analytical processes to the planning, design, and implementation of new and improved information systems to meet the mission requirements of the Agency's lines of business and administrative programs and safeguards systems from cyber threats in accordance with federal laws and regulations. This role executes the planning and delivery of secure, high-quality enterprise application services for FEMA personnel and stakeholders. In addition, the CISO provides the security architectural planning and delivery of information technology (IT) services across the enterprise and in support of FEMA program offices and regions. FEMA operates extensive IT capabilities (day-to-day, emergency, fixed, and mobile) including its own switched telecommunications and data networks, satellite systems, wireless systems, and complex automated applications integral to FEMA program missions. FEMA's IT capabilities are intra/inter-agency and inter-governmental in scope but are managed under the leadership of the CIO.

Primary Duties: Serves as the Senior Advisor to the CIO regarding development, publication, and implementation of Agency cybersecurity (information security) policies, standards, and guidance, as well as coordination, integration, training, and enforcement of all aspects of the Agency's cybersecurity program, consistent with guidance and direction from the U.S. Department of Homeland Security and in compliance with applicable laws, regulations, directives, and standards. Leads the Agency's implementation of all applicable regulatory requirements including the Computer Security Act, Federal Information Technology Acquisition Reform ACT (FITARA), Federal Information Security Management Act (FISMA), the Clinger-Cohen Act, relevant Office of Management and Budget (OMB) circulars and memoranda, Executive Orders, and Presidential Directives, as well as Congressional direction. Demonstrates leadership in guiding FEMA's cybersecurity program and informing Agency-wide information technology acquisitions. The incumbent provides daily management and oversight of the Office of the Chief Information Security Officer and its Division(s). Responsible for planning and implementing the Agency-wide cybersecurity enhancement initiatives, following all applicable laws, directives, policies, and directed actions and providing methodologies, tools, guidance, and subject-matter expertise to help ensure FEMA's cybersecurity programs can meet federal compliance and reporting requirements. The incumbent is also responsible for a balanced, robust, and secure information environment for FEMA systems. Effectively develops and communicates the cybersecurity strategy throughout the Agency and drives the implementation of the Agency's strategic information security management plan, including coordination with stakeholders in FEMA directorates, offices, and regions. Utilizes a full range of strategic management and leadership skills and understands, explains, and presents complex technical ideas to both technical and non-technical audiences at all levels up to the highest in a persuasive and convincing manner. Exercises broad and deep IT knowledge coupled with equivalent knowledge of the activities of those organizations that use and exploit IT. Communicates the potential impact of emerging security technologies on organizations as well as individuals and analyzes the risks of using or not using such technologies. Assesses the impact of legislation and actively promotes cybersecurity compliance. Takes the initiative to keep both his/her own and subordinates' skills current and maintains an awareness of developments in cybersecurity and other IT-related disciplines. Responsible for program management, organizational change, coordination, communication, policy, and oversight. Provides planning guidance for cybersecurity priorities within the Agency to all designated IT personnel, including System Owners, Information System Security Officers, and Information System Security Managers throughout the Agency, to ensure a common, comprehensive approach to securing information and IT systems and applications used to support FEMA goals and objectives.