Supervisory IT Cybersecurity Specialist (Direct Hire)

This Direct Hire role supports the CFTC’s cybersecurity compliance and operational readiness as the agency’s CISO.

Responsibilities

• Manage the cybersecurity program strategic planning and roadmap, including strategic and contingency plans for cyber incidents across likely scales and types; conduct reviews and update testing per CIO direction.
• Plan and oversee formal assessments of information systems; mitigate risk by managing the Assessment and Authorization (A&A) process to ensure existing and new IT systems meet cybersecurity and risk requirements.
• Oversee preparation of Authority to Operate (ATO) packages for the Authorizing Official’s signature.
• Ensure CISO programs and initiatives are aligned with commission priorities and communicated across the Commission by evaluating the adequacy of IT security controls and systems.
• Conduct and support internal and external security assessments, tabletop exercises, penetration tests, and playbook development to validate the effectiveness of the CFTC IT Cybersecurity Program.
• Produce the cybersecurity program annual budget report to Congress, highlighting progress toward mission goals and protection of agency information and IT systems.
• Establish and maintain a comprehensive IT cybersecurity program in compliance with Federal laws and regulations by implementing and managing IT policies, guidelines, standards, processes, and management controls.
• Lead incident response by executing established crisis management plans and communicating laterally and vertically as required.
• Apply mitigation, preparedness, and response and recovery approaches to optimize the Commission’s information security posture.
• Run regular crisis management exercises to validate agency response plans.
• Coordinate with external organizations to identify opportunities to share best practices, strategies, resources, and capabilities supporting an innovative and effective program for a Federal financial regulatory agency.
• Conduct independent comprehensive assessments of management, operational, and technical security controls and enhancements within or inherited by an IT system to determine overall control effectiveness (as defined in NIST SP 800-37).

Requirements

• U.S. Citizenship.
• For males born after 12-31-1959: must be registered for Selective Service.
• Background/Security Investigation is required.
• May be required to serve a supervisory probationary period.
• May be required to file a Financial Disclosure.
• Demonstrated Leadership (influences, motivates, challenges others; adapts leadership styles to situations).
• Developing Others (ongoing feedback; opportunities to learn through formal and informal methods).
• Attention to Detail.
• Customer Service (assess needs, provide information or assistance, resolve problems, satisfy expectations).
• Decision Making (sound, well-informed, objective decisions; commits to action to accomplish goals).
• Information Management (gather, organize, and maintain information or information systems).
• Interpersonal Skills.
• Oral/Written Communication (oral communication requirements specified; written not otherwise described).
• Problem Solving.
• Reasoning.
• Teamwork.
• Technical Competence.

Technology

• NIST SP 800-37
• Assessment and Authorization (A&A)
• Authority to Operate (ATO)

Benefits

• A career with the U.S. government provides employees with a comprehensive benefits package.
• Review benefits (eligibility depends on position type and whether the role is full-time, part-time, or intermittent).

Application & Eligibility Notes

• Open to U.S. Citizens, Nationals, or those who owe allegiance to the U.S.
• Filled under the OPM Government-wide Direct Hire Authority for IT Specialist positions.
• Applicants meeting qualification requirements will be forwarded to the selecting official.
• Category Rating, Veterans Preference, Schedule A, and traditional rating and ranking do not apply to this vacancy.

Required Documents

• Cover letter sharing skills and goals relevant to the application.
• Performance appraisal as proof of federal employment.
• Resume including relevant work experience, applicable education, and contact information; for current or previous federal employees, include pay plan, series, and grade.
• SF-50 showing federal position held, grade level, and duty location.
• Transcripts (may support qualifications; high school, college, or other schools).

How to Apply

• Resume must not exceed two pages; font size must not be smaller than 10 pts.
• Must apply online; complete application and required documents must be received by 11:59 p.m. Eastern Time (EST) on the closing date.