IT Specialist (InfoSec)

This position is located within the Office of Information Technology (OIT), Office of Information Security, Information Security Operations. The incumbent serves as an Information Technology (IT) Specialist within an Information Security (InfoSec) specialty. To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 05/29/2026. You may qualify based on your experience as described below. Basic Requirements Experience: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the five competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Specialized Experience You must possess a minimum of one (1) year of experience equivalent to at least the GS-12 level. Specialized experience for this position is defined as: Skill conducting comprehensive assessments of technical, operational, and management security controls in accordance with the NIST Risk Management Framework (RMF) to determine overall system security posture and ensure compliance with federal cybersecurity requirements. Skill developing, implementing, and evaluating information security policies, procedures, and long‑range strategies to protect the confidentiality, integrity, and availability of enterprise information systems and support organizational mission objectives. Skill planning and executing security authorization activities, including reviewing accreditation packages, validating implemented security controls, documenting deviations, and recommending corrective actions to maintain acceptable organizational risk levels. Skill performing detailed risk and vulnerability assessments for new and existing systems, analyzing audit logs and security events, and providing authoritative recommendations to mitigate threats, enhance security architectures, and supporting enterprise risk governance. Skill preparing and contributing to RMF documentation — including system security plans, risk assessments, POA&Ms, and lifecycle support plans — to accurately reflect security requirements, system impacts, and mitigation strategies across all phases of system development and operations. Skill coordinating the integration and implementation of security controls across platforms and teams, including assessing access controls based on least privilege, supporting incident resolution, verifying minimum security requirements, and advising stakeholders to maintain continuous compliance and security readiness. For more information on these qualification standards, please visit the United States Office of Personnel Management's website at #J-18808-Ljbffr US Deputy Assistant Secretary for Information and Technology