Prev Back to results Next

Print Save

Cybersecurity is seeking an Information Assurance Risk Manager to provide leadership.

Learn more about this agency

Help

Accepting applications

Open & closing dates

01/06/2025 to 01/17/2025
Salary

$152,352 - $170,102 per year
Pay scale & grade

HS 12 - 13
Help
Location

1 vacancy in the following location:
- Washington DC, DC 1 vacancy
Telework eligible

No
Travel Required

Not required - Not required.
Relocation expenses reimbursed

NoRelocation Description
Appointment type

Permanent
Work schedule

Full-time
Service

Excepted
Promotion potential

13
Job family (Series)
- 2210 Information Technology Management
Supervisory status

No
Security clearance

Not Required
Drug test

No
Announcement number

req3436
Control number

826805900

Help

The public

U.S. Citizens, Nationals or those who owe allegiance to the U.S.

Clarification from the agency

Open to the public

Help

Job Summary

The Office of the Chief Administrative Officer (CAO) provides operations support services and business solutions to the community of 10,000 House Members, Officers and staff. The CAO organization comprises more than 600 technical and administrative staff working in a variety of areas, including information technology, finance, budget management, human resources, payroll, childcare, food and vending, procurement, logistics and administrative counsel.

Cybersecurity is seeking an Information Assurance Risk Manager to provide leadership in the development and practical application of risk management governance, risk, and compliance efforts in direct support of the U.S. House of Representatives CAO’s Office of Cybersecurity.

This position has day to day supervisory/ managerial responsibilities.

Primary Duties/Responsibilities

Risk Management Governance: Develop, implement and ensure the rigorous application of risk management focused information security policies, procedures and other governance artifacts. Create, promote, and adhere to standardized, repeatable processes for the delivery of risk management services to the CAO. Provide both generalized and specialized input concerning risk management security standards and policy for IT plans, roadmaps, and prioritization of projects.
Assessment and Authorization (A&A) Expertise: Manage Information System Security Officers (ISSO) to support information technology (IT) security goals and objectives and reduce overall organizational risk. Advise ISSOs on all matters, technical and otherwise, involving the security of assigned IT systems. Provide role-based training for assigned ISSOs specific to their roles and responsibilities. Guide ISSOs in the development, and technical review of System Security Plans (SSP), which document all technical and procedural system security features. Lead the development and completion of security assessment packages that include the System Security Plan (SSP), Security Assessment Report (SAR), Risk Assessment Report (RAR), system Plan of Actions and Milestones (POA&M) and appropriate authorization letters. Oversee independent assessors in the assessment of CAO authorization boundaries. Advise senior management (e.g., Information Assurance Director and Chief Information Security Officer [CISO]) on risk levels and security posture.) Advise appropriate senior leadership or Authorizing Official of changes affecting the organization's cybersecurity posture.
System Development Lifecycle Outreach: Engage with program offices in the development phase to recommend security capabilities, provide technical guidance, and identify existing security controls that can minimize risk for applications, infrastructure, and vendor/third parties. Review proposed new systems, networks, and software designs for potential security risks; recommend mitigation or countermeasures and resolve integration issues related to the implementation of new systems within the existing infrastructure. Work with House Information Security Compliance Program to ensure all software systems are implemented according to House information security policies and technical guidelines.
Security Risk Management Reporting: Analyze, synthesize, and report on the security posture of the HIR using data maintained by stakeholders and recorded into the CAO’s security risk assessment tool. Work with senior leadership to help determine acceptable levels of risk for the enterprise. Conduct independent or coordinated studies to identify, evaluate or recommend solutions to significant systems management problems that are likely to be complex and sensitive in nature. Interface with technology leadership, Internal Controls, and Office of the Inspector General to communicate A&A status, collaborate on implementation of the RMF, and manage open audit and internal control findings. Provide technical support for responding to and implementing Office of Inspector General and Internal Controls/Internal Audit recommendations. Develop, conduct, and prepare reports for security audits, reviews and other actions, as appropriate.
Risk Management Program Oversight: Lead the daily activities for risk management team. Research and recommend innovative, secure, and (where possible) automated solutions to improve risk management processes and activities. Establish, assign and review short and long-term security risk management projects. Establish and support professional goals and objectives; train new employees and evaluate work performance.
Resource Management: Perform various aspects of federal staff and contract management related duties. Lead direct reports and cross-functional teams as one unit or team.
Performs other official duties as assigned.

Help

Conditions of Employment

USAJobs Conditions of Employment

Qualifications

Qualifications

Minimum of eight (8) years of demonstrated work experience in cybersecurity risk management.
Demonstrated experience managing small-scale teams.
Demonstrated experience in systems security assessments, reviewing system security documentation for successful security authorization of such systems.
Strong knowledge and expertise with cybersecurity guidelines such as NIST publications.
Demonstrated experience developing and maintaining assessment and authorization packages.
Proven technical acumen and understanding of common operating systems and network technologies, risk management frameworks, and common security tools and scanners.
Demonstrated understanding of cloud service models, hybrid applications, and mobile security technologies and tools.
Understanding of management, operational and technical cybersecurity principles.
Experience with privacy principles and frameworks is preferred.
Excellent written and oral communication skills.
Bachelor’s degree in computer science, information technology, cybersecurity, or a related technical discipline required.
Current and maintained certification in one or more of the following IT Security disciplines: Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) or equivalent certification required.
Continued employment is contingent upon satisfactorily completing a criminal history records check (or other applicable security clearance) and a pre-employment drug-test (pre-identified position only).

Help
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.

You will be evaluated for this job based on how well you meet the qualifications above.

You will be evaluated using a structured interview process.

Help
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
As a new or existing federal employee, you and your family may have access to a range of benefits. Your benefits depend on the type of position you have - whether you're a permanent, part-time, temporary or an intermittent employee. You may be eligible for the following benefits, however, check with your agency to make sure you're eligible under their policies.

Resume

If you are relying on your education to meet qualification requirements:

Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education.

Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating.
Qualified candidates please submit your resume online by following the instructions in this link.

Agency contact information

CAO Human Resources

Phone

202-225-2926

Address

CAO
441 2nd St
Washington, DC 20515

Learn more about this agency

Next steps

Qualified Candidates will be contacted directly.
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.

Help

Resume

If you are relying on your education to meet qualification requirements:

Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education.

Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating.

Help

Qualified candidates please submit your resume online by following the instructions in this link.

Agency contact information

CAO Human Resources

Phone: 202-225-2926
Address: CAO
441 2nd St
Washington, DC 20515

Learn more about this agency

Next steps

Qualified Candidates will be contacted directly.

The Federal hiring process is set up to be fair and transparent. Please read the following guidance.

Help

Accepting applications

Open & closing dates

01/06/2025 to 01/17/2025
Salary

$152,352 - $170,102 per year
Pay scale & grade

HS 12 - 13
Location

1 vacancy in the following location:
- Washington DC, DC 1 vacancy
Telework eligible

No
Travel Required

Not required - Not required.
Relocation expenses reimbursed

NoRelocation Description
Appointment type

Permanent
Work schedule

Full-time
Service

Excepted
Promotion potential

13
Job family (Series)
- 2210 Information Technology Management
Supervisory status

No
Security clearance

Not Required
Drug test

No
Announcement number

req3436
Control number

826805900

This job originated on www.usajobs.gov. For the full announcement and to apply, visit www.usajobs.gov/job/826805900. Only resumes submitted according to the instructions on the job announcement listed at www.usajobs.gov will be considered.

Information Assurance Risk Manager

Summary

Overview

Open & closing dates

Salary

Pay scale & grade

Location

Telework eligible

Travel Required

Relocation expenses reimbursed

Appointment type

Work schedule

Service

Promotion potential

Job family (Series)

Supervisory status

Security clearance

Drug test

Announcement number

Control number

This job is open to

Clarification from the agency

Duties

Requirements

Conditions of Employment

Qualifications

How You Will Be Evaluated

If you are relying on your education to meet qualification requirements:

Agency contact information

Next steps

Required Documents

If you are relying on your education to meet qualification requirements:

How to Apply

Agency contact information

Next steps

Fair & Transparent