Supervisory IT Specialist (INFOSEC)

Oversee risk management and cybersecurity programs within the VA Office of Information and Technology, onsite in Washington, DC, with a salary range of USD 147,945 to 192,331 per year.

Responsibilities

• Identify and address cyber workforce planning and management needs.
• Perform security reviews, detect gaps in the security architecture, and draft a security risk management plan.
• Ensure plans of action and milestones or remediation efforts exist for vulnerabilities found during risk assessments, audits, inspections, and related activities.
• Approve short-term, long-term, and multiyear assessment plans and schedules.
• Provide expert guidance and develop strategic compliance plans, policies, and guidance for a designated team.
• Conduct need analyses to uncover opportunities for improved business processes and solutions.
• Oversee monitoring of compliance with federal, state, and local laws and regulations at VA facilities and VA-wide programs, including contractor-managed environments.
• Offer enterprise cyber security and supply chain risk guidance for the development of Continuity of Operations Plans.
• Execute independent, comprehensive assessments of management, operational, and technical security controls and enhancements to determine overall effectiveness.
• Lead, coordinate, communicate, integrate, and be accountable for the program's overall success, ensuring alignment with agency priorities.
• Manage teams across multiple supervision levels in developing and monitoring compliance programs, procedures, and quality initiatives.
• Direct a comprehensive program of assessments to measure VA information systems compliance with statutes, federal oversight, and VA policies and practices.

Requirements

• U.S. Citizenship is required to apply.
• Complete all required steps in the process, including the online assessment that measures key general competencies.
• No inherent physical requirements; accommodations available; no pre‑placement physical exam required.
• Probationary period may be required.
• Subject to background and security investigation.
• Online onboarding may be required; provide acceptable I-9 documents. After May 7, 2025, Real ID noncompliant IDs cannot be used for employment.
• A one-year probationary period applies; continuation depends on performance and alignment with public interest goals.
• Probationary period outcomes may lead to termination without written certification of continued public interest.
• IT related experience must demonstrate five competencies: Attention to Detail; Customer Service; Oral Communication; Problem Solving; and Specialized Experience at least GS-15 level.
• Specialized Experience includes leading enterprise cybersecurity risk management, directing risk activities, designing evaluation/reporting methods, and defining program metrics.
• Expertise in applying Enterprise Risk Management and Security Architecture to guide decisions and risk mitigation across a large portfolio.
• Experience leading end-to-end Security Assessment and Authorization activities for complex VA systems, achieving timely Authorizations to Operate and reducing POA&M.
• Skills in program and process management to evaluate, implement, and disseminate security capabilities and validate outcomes with metrics.
• Selective Placement Factor: experience leading enterprise cybersecurity risk management per the NIST RMF, evaluating controls, preparing or approving authorization documentation, and making authorization impact recommendations for enterprise IT systems.
• Full-time work is considered 35-40 hours per week; part-time experience is credited proportionally.
• Veterans and transitioning service members: see VA for Vets resources for career tools and coaching.
• For qualification standards, refer to the U.S. Office of Personnel Management guidelines.

Open To

• The public: U.S. Citizens, Nationals, or individuals who owe allegiance to the United States.
• Career transition priority for CTAP/ICTAP eligible federal employees in the local commuting area.

Direct Hire Authority

This position is being filled using Direct-Hire Authority (5 CFR 337.205) for this occupation.

Education

There is no educational substitution at this grade level.

Required Documents

• Resume
• DD-214 or Statement of Service
• Disability Letter (VA)
• OF-306
• Other (1)
• Other (2)
• Performance Appraisal
• Separation Notice (RIF)
• SF-50 or Notification of Personnel Action

Benefits

• A comprehensive benefits package available to federal employees and their families, designed to support a rewarding career.
• Detailed benefits information is provided by the hiring agency; eligibility depends on position type and work schedule.