Supervisory IT Specialist (INFOSEC) will serve as the organization’s senior information security leader, overseeing HHS OIG-wide security, risk, and privacy governance while ensuring federal compliance.

Responsibilities

Provide broad policy analysis, consultation, advice, and program management for information security, risk, and privacy, promoting sound methods and industry best practices.
Oversee the organization’s Security Program, including planning, coordinating, and controlling security and privacy activities across all systems, devices, and communications platforms.
Manage compliance with federal information security and privacy requirements, including FISMA, the Computer Security Act, the Clinger-Cohen Act, and OMB Circular A-130.
Develop and implement organization-wide IT security plans and programs, including threat and risk assessment, risk management, training, program oversight, and evaluation.
Act as a focal point for IT security audits and evaluations, and manage the enterprise-wide project plan for vulnerability mitigation required under FISMA.
Coordinate regular testing of telecommunications networks and IT resources to confirm alignment with established security standards and practices.
Provide expert guidance to senior leadership, including the HHS CISO, program officials, and technical staff; prepare briefings and recommendations on significant security issues.
Plan, organize, and direct subordinate staff activities to ensure IT programs comply with legal and regulatory requirements and support operational needs.

Requirements

U.S. Citizenship is required.
Registration with the Selective Service (if applicable).
Suitability for Federal employment determined by background investigation.
One-year probationary period may be required.
Confidential financial disclosure report (OGE-450) is required.
Must be able to obtain and maintain a Top-Secret/SCI Clearance.
This role is a Testing Designated Position: drug screening prior to appointment, plus unannounced random drug testing during employment.
One-year Supervisory Probationary Period may be required.
GS-2210 basic qualifications require IT-related experience showing the competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork, Technical Competency.
Applicants must have 1 year of specialized experience equivalent to the next lower grade level in the Federal service.
Specialized experience must include leading enterprise information security programs and cybersecurity governance in compliance with FISMA, OMB Circular A-130, and other federal information security legislation, directives, and standards.
Specialized experience must include applying federal cybersecurity frameworks: NIST SP 800-53, NIST Risk Management Framework (SP 800-37), Zero Trust Architecture (SP 800-207), and the NIST Cybersecurity Framework.
Specialized experience must include overseeing security authorization, risk assessments, continuous monitoring, and authority to operate (ATO) processes for enterprise information systems.
Specialized experience must include supervisory oversight of multi-disciplinary information security teams (for example: governance/risk/compliance, cloud security, identity & access management, threat detection & response) in a large or complex organization.
Federal experience is not required.
Education is not qualifying for this position.

Technologies / Frameworks

FISMA
Computer Security Act
Clinger-Cohen Act
OMB Circular A-130
NIST SP 800-53
NIST Risk Management Framework (SP 800-37)
Zero Trust Architecture (SP 800-207)
NIST Cybersecurity Framework
Authority to operate (ATO)
OGE-450

How You Will Be Evaluated

Evaluation will be based on how well you meet the qualifications provided.
Eligibility and qualifications will be determined based on review of your detailed resume.
Your resume will be evaluated for evidence demonstrating possession of specialized experience.
Evaluation will be performed by a subject matter expert to determine whether you meet qualifications; results will support an initial rating.

Required Documents

Resume (two-page limit)
Responses to the Assessment Questionnaire
Veterans’ Preference documentation (if applicable): submit DD Form 214 and, if applicable, Application for 10-Point Veterans Preference and an official document dated 1991 or later
SF-50, Notification of Personnel Action
Performance Appraisal
CTAP/ICTAP/RPL documentation
SF-50 requirements: must show competitive service appointment (position occupied block 34 should show a “1”), tenure group (block 24 should show a 1 or 2), grade, and salary

Additional Information

Recruitment incentives: payment for relocation expenses may not be authorized.
Recruitment incentives: a recruitment bonus may not be offered.
Recruitment incentives: student loan repayment may not be offered.
Private sector work experience will not be approved as credit for Annual Leave accrual.
Background security investigation required for all appointees; appointment depends on successful completion and favorable adjudication.
Background security reinvestigation or supplemental investigation may be required later.
False representation may result in non-consideration, non-selection, and/or appropriate disciplinary action.
E-Verify: documentation for DHS Form I-9 will be verified through the DHS “E-Verify” System.
Direct Deposit is required for Federal salary payments.
CTAP/ICTAP documentation: if eligible as a displaced or surplus Federal employee, you MUST submit proof of eligibility.
CTAP/ICTAP selection priority: eligible candidates must be rated well-qualified at 85.0 or above to exercise selection priority.
HHS is an equal opportunity employer.
Disabled Veteran Leave: HHS OIG participates in the Wounded Warrior Federal Leave Act of 2015.

Open To

The public
U.S. Citizens, Nationals, or those who owe allegiance to the U.S.

Clarification from the Agency

All U.S. Citizens; no prior Federal experience is required.

Application Deadline

Applications must be received by 11:59 PM (Eastern Time) on 10/13/2026.

Benefits

A career with the U.S. government provides a comprehensive benefits package.
Benefits eligibility depends on the type of position and whether it is full-time, part-time, or intermittent.

Supervisory IT Specialist (INFOSEC)

Job Description