IT Cybersecurity Specialist (INFOSEC)

Job Title

The Department of Labor may use certain incentives and hiring flexibilities, currently offered by the Federal government to attract highly qualified candidates. Relocation Expenses, Recruitment Incentives, Superior Qualifications and Special Needs Pay-Setting Authority may be negotiable.

The position may be located at any of the DOL office locations, if available. The advertised salary range reflects the minimum and maximum pay for all locations. Final salary will be determined based on the selectee's assigned duty station in accordance with applicable locality pay tables.

The role supports the Chief Information Officer (OCIO) and its Directorate of Cybersecurity, which consists of the following divisions: Cybersecurity Governance, Cybersecurity Authorization, and Security Operations Center. Under the direction of the Department's Chief Information Security Officer (CISO), the Directorate manages the enterprise-wide organizational risk associated with the operation of unclassified and classified information systems through a distribution model that provides resiliency in the face of evolving threats.

Major duties include, but are not limited to:

• Review and evaluate security control assessment findings to determine risk significance, recommend appropriate responses, and align remediation actions with organizational risk tolerance and priorities.
• Consult with authorizing officials. Advises on whether findings represent significant risk and require immediate remediation.
• Develop informed recommendations for initiating immediate remediation activities where findings can be easily remediated.
• Update assessment reports with results from reassessments while preserving original findings.
• Revise and maintain security and privacy plans to reflect the current state of implemented controls, including updates resulting from corrective actions taken by system owners or common control providers.
• Verify that system security and privacy documentation accurately describes all implemented controls, including compensating controls applied to meet security requirements.
• Develop comprehensive Plans of Action and Milestones (POA&Ms) that include timelines, deadlines, methods, Measures of Effectiveness, and Measures of Success to track remediation progress.
• Administer the Agency Computer Security Awareness Training Program, ensuring mandatory compliance and delivering specialized cybersecurity training tailored to workforce needs.
• Design, maintain, and implement the Department's IT Security Training and Awareness Program in collaboration with departmental IT leaders and security professionals.
• Enhance secure system operations by proactively addressing security issues identified through continuous monitoring, control assessments, and incident response activities.

Major duties for this position at the GS-14 level are similar to the GS-13, however, they are performed under less supervision.