Supervisory IT Specialist (INFOSEC)

This position is located in the Cybersecurity Group within the Office of the Chief Information Officer (OCIO), Office of the Managing Director (OMD), Federal Communications Commission (FCC), located in Washington, DC. Relocation expenses will not be paid. This vacancy announcement may be used to fill additional positions within 90 days. Interested candidates should be passionate about the ideals of our American republic, committed to upholding the rule of law and the U.S. Constitution, and committed to improving the efficiency of the Federal government. Hiring decisions will not be based on race, sex, color, religion, or national origin. Applicants must meet eligibility and qualification requirements by the closing date of this announcement. Time in grade restrictions do not apply to Direct Hire procedures.

SME REVIEW

Individuals must have IT-related experience demonstrating each of the competencies listed below. SME's will be conducting a scored structured resume review to determine if candidate's resumes demonstrate all required competencies as outlined below. To be eligible for referral to the selecting official, candidates must receive a score of at least 75.56. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change. Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems. Interpersonal Skills - Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Teamwork - Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals. Technical Competence - Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues. Cyber - Expert knowledge of Federal cyber and cybersecurity policy, procedures, and guidelines, cyber and cybersecurity concepts, terms, and technical aspects. Advice - Expert ability to provide advice, guidance, and recommendations to senior management on critical policy issues; make decisions or recommendations that significantly influence important Commission IT and Cybersecurity policies or programs. IT Principles - Skill in applying advanced IT principles, concepts, methods, standards, and practices sufficient to accomplish assignments such as develop and interpret policies, procedures, and strategies governing the planning and delivery of IT services throughout the agency.

AND GS-15

In order to be deemed as qualified, candidates must have one year of specialized experience which is equivalent to the GS-14 level in the Federal service. Specialized experience is defined as follows: Demonstrated experience implementing and maintaining compliance with FISMA, FedRAMP, and NIST Risk Management Framework (RMF), including NIST SP 800-37, 800-53, and 800-171. Experience managing Authorization to Operate (ATO) processes, including Security Assessment and Authorization (SA&A) packages. Experience with CMMC (Cybersecurity Maturity Model Certification) requirements, if applicable to the agency. Experience managing Plans of Action and Milestones (POA&Ms) and reporting to CISA/OMB. Experience working with Continuous Diagnostics and Mitigation (CDM) program requirements. Experience developing or implementing AI governance frameworks aligned with NIST AI Risk Management Framework (AI RMF) and OMB M-24-10. Experience overseeing Security Operations Center (SOC) functions, including detection engineering and incident triage. Experience leading enterprise vulnerability management programs, including use of tools such as Tenable. Experience reducing organizational attack surface through patch management, configuration hardening, and risk-based prioritization. Experience implementing Zero Trust Architecture (ZTA) principles across network, identity, and data layers. Experience securing FedRAMP-authorized cloud environments (AWS GovCloud, Azure Government, or similar). Experience with cloud security posture management (CSPM) and container/Kubernetes security. Experience coordinating with CISA, US-CERT, and other federal partners on incident reporting and response. Experience developing and testing incident response plans, tabletop exercises, and continuity of operations (COOP) planning. Experience leading cross-functional security teams and managing federal IT security budgets. Experience developing agency/company-wide cybersecurity strategy, policy, and workforce training programs. Experience presenting risk posture and compliance status to agency leadership, Inspectors General, or GAO auditors or similar.

PART-TIME OR UNPAID EXPERIENCE:

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. #J-18808-Ljbffr US Federal Communications Commission