Chief Information Security Officer

Summary

Department of the Interior structures its Senior Executive Service (SES) positions into categories to determine the minimum pay for each position. This is a category 4 position. The minimum pay for this position is $162740. Pay is set based on consideration of the selectees current salary and other factors.

Veterans preference does not apply to the SES.

Duties

The position is located in the Office of the Chief Information Officer (OCIO) at the Department of the Interior (Department) and reports to the Chief Information Officer.

The incumbent carries out the following specific responsibilities :

• Set enterprise security strategy. Define company-wide security policy standards and risk tolerance working closely with the CIO and system owners.
• Run the risk management program. Stand up and mature a structured framework-based approach to identifying assessing and treating risk across all systems. Own the enterprise risk register and drive remediation plans to closure.
• Own system security assessment and approval. Decide which systems are cleared to go live and stay live backed by continuous monitoring rather than point-in-time checkpoints.
• Drive the Zero Trust roadmap. Move the organization toward least-privilege access strong identity and access management and phishing-resistant multifactor authentication.
• Lead threat detection and incident response. Own the security operations center (SOC) endpoint detection and response (EDR) enterprise logging maturity and the incident response process - including meeting mandatory external breach-reporting deadlines.
• Govern core security hygiene. Vulnerability and patch management penetration testing secure configuration baselines and encryption of data at rest and in transit.
• Secure the supply chain. Lead third-party/vendor and software supply-chain security including software bill of materials (SBOM) practices and enforce security requirements for cloud service providers.
• Protect operational technology. Oversee security for industrial control systems and SCADA environments - a first-order concern given the physical infrastructure (dams hydropower generation) this organization operates.
• Report on the program. Deliver security metrics and regular reporting to leadership and external oversight bodies and support independent annual security audits and audit responses.
• Build the security workforce and budget. Own the cyber talent strategy role-based and security-awareness training and lead security budget and investment planning with the CIO and finance leadership.
• Be the principal cybersecurity advisor and spokesperson to senior leadership oversight bodies and external government and partner organizations.
• Shape the organizations position on emerging security policy and technologies - including critical-infrastructure protection and AI-enabled systems - and ensure the organization meets or exceeds recognized industry and regulatory security standards.
• Hold the organization accountable for following the security program and ensure major incidents are escalated and reported on time.
• Engage the broader community. Collaborate with peer CISOs cross-industry and interagency security councils and working groups on emerging issues in cybersecurity AI security and privacy.
• Lead the security organization the operationally coordinating closely with infrastructure and business system operational entities privacy records and data governance functions to ensure high performing and reliable platforms and systems and keep privacy and security governance integrated
• Partner on AI security. Work with the Chief AI Officer and AI teams to manage AI-related security risk secure AI model development and use AI to strengthen security operations.
• Manage the team. Own workforce planning headcount and organizational structure for all security staff including remote and hybrid employees.

If your resume does not include these basic qualifications you will not be determined qualified for this position. We recommend that your resume includes examples that are clear concise and emphasize their level of responsibilities the scope and complexity of the programs activities or services managed; program accomplishments; policy initiatives undertaken; level of contacts; the sensitivity and criticality of the issues addressed; and the results of actions taken.

Requirements

Conditions of employment

• U.S. Citizenship.
• You will be subject to a background/suitability investigation/determination.
• Newly appointed SES members must serve a 1-year probationary period.
• Public Financial Disclosure OGE-278 filing within 30 days is required.
• This position may require pre and post-employment drug screening.
• Selections are subject to Department approval. Initial appointments to the SES must have to undergo an ECQ based structured interview with Office of Personnel Management (OPM).
• Males must meet Selective Service Registration Act requirements. To verify registration visit .
• Agencies must request OPM approval to appoint current or former (within 5 years) Executive Branch political appointees to permanent competitive service non-political excepted service or career SES position.

Qualifications

Candidates should be committed to improving the efficiency of the Federal government passionate about the ideals of our American republic and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race sex color religion or national origin.

To meet the minimum qualifications you must submit a two-page resume (max) that shows you possess the Executive Core Qualifications (ECQs) and two Technical Qualifications (TQs). To be considered only the first 2 pages of your resume will be reviewed to determine your eligibility/qualifications.

Technical Qualifications (TQs) are designed to assess an applicants experience relevant to the specific position requirements. Your resume should clearly demonstrate your experience and accomplishments related to the two TQs below:

• TQ1 - Enterprise cybersecurity program leadership. Demonstrated technical expertise and executive experience leading an information security program for a large complex geographically dispersed organization spanning policy risk management and operations.
• TQ2 - Cyber defense operations at scale. Demonstrated experience directing threat detection incident response vulnerability management and continuous monitoring including coordination with CISA/Equivalent and external partners.

ECQ 1-Commitment to the Rule of Law and the Principles of the American Founding: Demonstrated knowledge of the American system of government commitment to uphold the Constitution and the rule of law and commitment to serve the American people.

ECQ 2 - Driving Efficiency: Demonstrated ability to strategically and efficiently manage resources budget effectively cut wasteful spending and pursue efficiency through process and technological upgrades.

ECQ 3 - Merit and Competence : Demonstrated knowledge ability and technical competence to effectively and reliably produce work that is of exceptional quality.

ECQ 4 - Leading People : Demonstrated ability to lead and inspire a group toward meeting the organizations vision mission and goals and to drive a high-performance high accountability culture. This includes when necessary the ability to lead people through change and to hold individuals accountable.

ECQ 5 - Achieving Results : Demonstrated ability to achieve both individual and organizational results and to align results to stated goals from superiors.

Qualifications will be evaluated based on how clearly and concisely you emphasize your level of responsibilities the scope and complexity of your programs; services managed; program accomplishments; policy initiatives undertaken; level of contacts; the sensitivity and criticality of the issues addressed; and the results of your actions taken. Typically experience will have been gained at the GS-15 or equivalent in the private sector or non-governmental organizations. Already SES Certified

If you are currently serving under a career Senior Executive Service appointment are eligible for reinstatement into the Senior Executive Service or have completed a Senior Executive Service Candidate Development Program (SES CDP) approved by OPM you only need to submit a two-page resume and personnel action showing you have held a career SES position. SES CDP graduates must submit a two-page resume and a copy of their CDP program certification with their package.

Education

There is no educational requirement for this position.

Additional information

Individuals selected for Senior Executive Service positions may be subject to reassignment across geographical organizational and functional lines. The Department of the Interior structures its SES positions into categories to determine the minimum pay for each position. Pay is set based on consideration of the selectees current salary and other factors. Effective January 1 2010 OPM must authorize any employment offers we make to current or former (within the last 5 years) political Schedule A Schedule C or Non-career SES employees in the executive branch. lf you are currently or have been within the last 5 years a political Schedule A Schedule C or Non-career SES employee in the executive branch you must disclose that to the Human Resources Office. If you are unable to apply online or need to fax a document that you do not have in electronic form view the following link for information regarding an Alternate Application. Click the following link for more information should be committed to improving the efficiency of the Federal government passionate about the ideals of our American republic and committed to upholding the rule of law and the United States Constitution.

Required Experience:

Chief

]]>