Oversee information system security activities for the U.S. Department of Education’s Federal Student Aid within the Security Services Division.

Oversee implementation of IT security controls and security authorization documents to ensure the system meets mandated security policies and requirements.
Conduct security analysis of IT activities to verify security measures are in place, enforced, and remediated as needed.
Identify possible security violations, follow required incident reporting procedures, and take corrective action to address cybersecurity incidents.
Ensure system modifications, acquisitions, and outsourcing efforts include information security requirements aligned with organizational goals.
Continuously validate the system against applicable policies, guidelines, procedures, regulations, and laws to maintain compliance.

US Citizen.
Males 18 and over must be registered with the Selective Service.
Must complete a Background Investigation and Fingerprint check.
Must be determined suitable for federal employment.
Relocation expenses will not be paid.
May be subject to a one-year probationary period.
As a condition of employment, may be required to serve a probationary or trial period to evaluate fitness and whether continued employment advances the public interest.
Must meet all qualification requirements within 30 days of the closing date of the vacancy announcement.
Experience can include paid and unpaid work, including volunteer work through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social).
Education cannot be substituted for experience for this position and grade level.

Position: Information System Security Officer (ISSO)
Organization: U.S. Department of Education (ED), Federal Student Aid (FSA), Chief Technology Division, Security Services Division
Grade/Class: IT Specialist (INFOSEC) “Information System Security Officer (ISSO)” GS-2210-13

Application limit: limited to the first 200 applications received.
Announcement closes at 11:59PM Eastern Time on the day the 200th application is received, or on the listed closing date, whichever occurs first.

You may meet the minimum qualifications for GS-13 with specialized experience, education, or a combination of both.
Specialized Experience for GS-13: One year of experience (federal or non-federal) equivalent to at least a GS-12 performing 2 out of 3 duties:
- Conduct cybersecurity risk assessments and support Security Assessment and Authorization process efforts.
- Ensure vulnerabilities and Plans of Actions and Milestones (POA&Ms) are processed timely and remediation plans are in place.
- Support implementation and functionality of security requirements and IT policies and procedures aligned with the organization’s mission and goals.
For GS-12/13/14/15 levels, applicants may qualify by meeting/exceeding the minimum proficiency level for required competencies in addition to the specialized experience requirement.
Must have IT-related experience (paid or unpaid and/or completion of specific intensive training such as IT certification) demonstrating each of the nine competencies listed in the announcement.

Knowledge of cybersecurity risk management processes (assessing and mitigating cybersecurity risks).
Knowledge of cybersecurity and privacy principles, vulnerabilities, impacts of cybersecurity lapses, and applicable business processes of customer organizations.
Knowledge of vulnerability information dissemination sources (alerts, advisories, errata, bulletins) and incident response and handling methodologies.
Ability to integrate cybersecurity requirements into system modification processes using applicable baseline security controls and support robust software quality control.
Skill in researching, selecting, interpreting, modifying, and applying guidelines adapted to specific cybersecurity problems or issues.

Comprehensive benefits package for federal employees (eligibility depends on position type).
Excused leave for Parent/Teacher Conferences (3 hours).
Excused leave for annual health screenings (4 hours).
Matching leave for community volunteer service.
Alternative work schedules (flexibilities may be available).
May be eligible for a recruitment incentive (requires a service agreement to remain with the U.S. Department of Education for a specified period).
May be eligible for a relocation incentive (requires a service agreement to remain with the U.S. Department of Education for a specified period).
May be eligible to participate in the Student Loan Repayment Program as a recruitment incentive (requires a service agreement to remain with the U.S. Department of Education for a specified period).

Public: U.S. Citizens, Nationals, or those who owe allegiance to the U.S.
Career transition (CTAP, ICTAP, RPL): Federal employees whose job, agency, or department was eliminated and are eligible for priority over other applicants.
Clarification from the agency: announcement is open to all U.S. Citizens.
Clarification from the agency: position may be filled through the Direct Hire Authority for IT Specialist positions.
Clarification from the agency: Category Rating, Veterans Preference, Schedule A, and traditional rating and ranking do not apply to this vacancy.

Resume demonstrating education, experience, training, and accomplishments related to qualifications and substantiating responses to the occupational questionnaire.
Limit resume to 2 pages with font size no smaller than 10 points; if more than 2 pages, only the first 2 pages will be reviewed.

Employees may receive detail assignments to agencies in support of interagency agreements (IAAs).
Condition of Employment: probationary or trial period may be required to evaluate fitness; upon completion, employment is terminated unless continued employment advances the public interest (certification required in writing).
Veterans’ Career Counseling: [email protected].
Student Loan Default: verification that you have not defaulted on any loan funded or guaranteed by the U.S. Department of Education.
Suitability and Investigation: complete the Declaration for Federal Employment (OF-306) and successfully complete a pre-appointment investigation/background check.
Essential/Non-Essential: position considered non-essential for purposes of reporting to work during federal government closures.
Financial Disclosure: this position does not require financial disclosure.
Bargaining Unit: not included in the bargaining unit.
Selections: broad authority to hire from any appropriate source of eligibles; may make additional selections within 90 days; may share selection certificates among program offices.
Reasonable Accommodation Requests: request a RA for USA Hire Competency Based Assessments; decisions are case-by-case; assessments must be completed within 48 hours of receiving the URL.
If unable to apply online, request info about Alternate Application process using contact information provided in the announcement.

Information System Security Officer (ISSO)

Job Description