Chief Information Security Officer

Summary

This position is located in the Drug Enforcement Administration (DEA), Information System Division (TC) in Arlington, Virginia. The purpose of this position is to advise the Chief Information Officer (CIO) on the security oversight for all DEA information technology (IT) systems. The incumbent will direct cybersecurity policies, risk management, security engineering, incident response, and supply chain security programs for the DEA IT Enterprise.

Duties

As a Chief Information Security Officer, your typical work assignments may include: Direct the design, formulation, and establishment of policies, procedures, standards, and systems regarding IT security, cybersecurity, and access to IT systems. Plans, directs, schedules, and supervises work performed and within the agency concerning the preparation and formulation of DEA-wide policy in the form of policies and procedures, which affect all areas of IT security, cybersecurity, and access to IT systems. Reviews and refines such policies and procedures to ensure compliance with existing authorities and applicability to the DEA environment. Serves as the source of authoritative information and assistance to DEA managers by advising on IT security, cybersecurity, and access to IT systems on issues and impact of information security programs to organizational missions. Advises managers regarding changes in relevant EOs, DOJ Orders, NSA policies and regulations, and other applicable laws, directives, and regulations. Recommends changes to the IT security posture/programs in response to changes in technology, vulnerabilities, and threats. Finalizes DEA responses to requests from DOJ, Office of Management and Budget (OMB), General Accounting Office, the White House, and Congressional committees for INFOSEC programs to comply with applicable laws and regulations. Provides leadership to information security professionals to develop and implement an Information Security Program that substantially includes an integrated framework of Information Security Governance and Information Risk Management program for DEA. Qualifications

Qualifications include both general management skills and characteristics that are applicable to all Senior Level positions and technical or program responsibilities specific to this position. Applicants must have substantive general experience which provides a good basic or general knowledge of the principles of organization, management, and administration; and substantive specialized (operating administrative or managerial) experience in a type of work or a combination of functions directly related to this position. Applicants must meet the qualification requirements by the closing date of this announcement. Eligibility for this position will be based upon a clear showing that the applicant has experience of the scope and quality sufficient to effectively carry out assignments of the position. Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race, sex, color, religion, or national origin.To meet the minimum qualification requirements for this position, you must show that you possess the Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit will be disqualified. Please see "Required Documents" section below for all resume formatting requirements. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position. TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications: MTQ 1: Demonstrated experience with risk management principles and methodologies, including the ability to identify, assess, and prioritize risks for Super Intelligence (SI), legacy systems, emerging technologies, complex datasets, and cloud solutions as well as a thorough understanding of federal compliance requirements (e.g. FISMA, NIST), ensuing compliance with these requirements, and securing complex data in various environments. MTQ 2: Expertly expresses complex information (e.g. ideas or facts) on cybersecurity, risk, compliance, secure SI implementation, and/or data-related concepts considering the audience and nature of the information. Demonstrated skill in presenting cybersecurity topics to an executive audience in order to promote a culture of security awareness, effectively report on compliance with requirements, and utilizes data to drive metrics-based decisions. MTQ 3: Demonstrates an ability to drive technical innovation in a secure, compliant, and data-driven manner to support the overall goal of modernizing DEA's IT enterprise. Experience securely integrating new technologies, processes, complex data sets, SI and cloud solutions into an organization while efficiently assessing risk, compliance, and data security. Possesses a comprehensive understanding of IT security concepts, theories, practices, and standards. Serves as a foremost authority in security architectural planning and provides senior level guidance to agency leadership.

Education

Education: All academic degrees and coursework must be from accredited or pre-accredited institutions. Desired Education: Undergraduate or Graduate Education or equivalent experience. How You Will Be Evaluated

All qualification requirements must be met by the closing date of this announcement. Additional information on the qualification requirements is outlined in the OPM Qualifications Standards Handbook of General Schedule Positions. It is available for your review in our office, in other Federal agency personnel offices, and on OPM's web site at http://www.opm.gov/qualifications. You will be evaluated for this job based on how well you meet the qualifications above. Once the application process is complete, a review of your resume and supporting documentation will be conducted. If you meet minimum qualifications, your Application Package will be further reviewed to determine if you possess the Technical Qualifications (MTQ) listed above. TQs must be thoroughly addressed within your two (2) page resume. Separate narratives will not be accepted or reviewed. Highly Qualified applicants may undergo one or more interviews and may be referred to the selecting official for further consideration. BASIS OF RATING: Candidates will be evaluated on the qualifications identified above based on their total background, i.e., education, training, self-development, awards, outside activities, performance appraisal, as well as work history. Only candidates meeting all of the mandatory technical qualifications will be deemed eligible for further consideration.Do not overstate or understate your level of experience and capability. You should be aware that your ratings are subject to evaluation and verification. Later steps in the selection process may be used to verify your stated level of experience and capability. If a determination is made that you have rated yourself higher than is supported by your resume you will be assigned a rating commensurate to your described experience. Deliberate attempts to falsify information may be grounds for not selecting you. If you are found to be among the top candidates, you will be referred to the selecting official for employment consideration. Other Information

For reasonable accommodation at the Drug Enforcement Administration, please contact the Human Resources office listed in this announcement. Veterans Employment Opportunity Act (VEOA): To be eligible for a VEOA appointment under Merit Promotion procedures, the veteran must be a preference eligible or a veteran separated after 3 years or more of continuous active service performed under honorable conditions. Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, Non-career SES or Presidential Appointee employee in the Executive Branch, you must disclose this information to the Human Resources Office. Multiple positions may be filled from this announcement. If eligible, applicants to this announcement may be referred to similar positions in any Division/Office listed in this announcement. Telework eligibility and security clearance requirements may vary for such similar positions. Recruitment and/or Relocation Incentives may be considered and approved under conditions specified provided the agency has determined that the position is likely to be difficult to fill in the absence of an incentive and funding for such an incentive is available. As a condition of employment for accepting this position, you may be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: your performance and conduct; the needs and interests of the agency; whether your continued employment would advance organizational goals of the agency or the Government; and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. If eligible, telework agreements may be permitted with supervisory approval.