It Specialist (Infosec)

Join VA's Office of Information Security (OIS) to help protect VA's IT systems and Veteran data from cyber threats. As an IT Specialist (Infosec), you will enforce federal IT security policies, support network defense, and strengthen VA's cyber resilience as part of a team that values security and education. Advance your career by contributing to VA's digital transformation – apply today! To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 06/24/2026. Key Qualities Attention to Detail – thoroughness when performing work and conscientious about attending to detail. Customer Service – works with clients and customers to assess their needs, provide information or assistance, resolve problems, and satisfy expectations; knows available products and services and is committed to quality. Oral Communication – expresses information effectively to individuals or groups, considering audience and nature of information; makes clear and convincing oral presentations; listens and responds appropriately. Problem Solving – identifies problems, determines accuracy and relevance of information, uses sound judgment to generate and evaluate alternatives, and makes recommendations. Specialized Experience One year of specialized experience equivalent to at least GS‑12 in the normal line of progression for the occupation in the organization. Examples include independent review and analysis of cybersecurity risk management data from multiple sources, comprehensive assessment of IT system security controls in accordance with NIST SP 800‑37, development of security authorization packages, monitoring compliance with federal cybersecurity requirements, and support of Risk Management Framework (RMF) functions such as Governance, Risk and Compliance (GRC) activities and compliance with OIG FISMA and FISCAM audits. Selective Placement Factor Direct experience applying the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) to conduct security control assessments, develop authorization packages, and document security requirements for information technology systems at the agency or enterprise level. Experience supporting RMF compliance functions, including Governance, Risk and Compliance (GRC) capabilities and OIG Federal Information Security Management Act (FISMA) and Federal Information System Controls Audit (FISCAM) audits. For more information on these qualification standards, visit the United States Office of Personnel Management's website at #J-18808-Ljbffr