Associate Chief Information Officer for Security Operations

Summary

This position serves as the Associate Chief Information Officer for Security Operations and reports to the Deputy Administrator for Technology Services Operations, and is responsible for leading and managing all functions of the Treasury Security Operation Center (TSOC). The TSOC provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions for both unclassified and classified systems.

Duties

As Associate Chief Information Officer for Security Operations, you will: Lead a cross-functional team of Departmental stakeholders to identify and implement protective controls that minimize Treasury's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale. Operate a set of technical capabilities that ingest signal from internal sensors (e.g., endpoint agents, proxies, firewalls, packet capture, netflow) and capture telemetry from external sources (e.g., vulnerability scans, vulnerability disclosures, third parties). to identify threats. Oversee all activities as captured in the Departmental incident response plan, including but not limited to incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions. The incumbent shall use digital forensics to support these activities. Oversee and manage the Security Operations Center budget. Lead the work of a subordinate a hybrid staff of federal/contracted practitioners and specialists that are focused on ensuring the confidentiality, integrity, and availability of all Treasury's classified and unclassified systems. Communicate to the Deputy Administrator, Treasury Chief Information Officer and Treasury Chief Information Security Officer, and other program and policy officials regarding Treasury's active defense activities. Provides authoritative recommendations and solutions to problems and challenges with respect to federal mandates/legislation, risk management, and improvement of operational capabilities. Qualifications

Applicants must meet all qualifications and eligibility requirements by the closing date of this announcement. To meet the minimum qualifications for the position of Associate Chief Information Officer for Security Operations, applicants must possess the Executive Core Qualifications listed below. Typically, qualified applicants will have gained experience of this nature at or above the (GS)-15 grade level or its equivalent in the public or private sector. To be qualified for this position, your resume must reflect experience in a managerial capacity. Typically, experience of this nature is gained at or above the GS-15 grade level in the Federal service, or its equivalent with state or local government, the private sector, or nongovernmental organizations. As such, your resume must demonstrate that you have the knowledge, skills, and abilities to successfully fulfill responsibilities inherent in most SES positions such as: Directing the work of an organizational unit; Accountability for the success of one or more specific programs or projects; Monitoring progress toward organizational goals and periodically evaluates and makes adjustments to such goals; Supervising the work of employees (other than personnel assistants) at least 25% of the time; or Exercising important policy-making, policy-determining, or other executive functions Applicants seeking initial career appointment to the Senior Executive Service (SES) must clearly demonstrate the ability to meet the ECQs within their two (2) page resume (any experience exceeding 2 pages will not be reviewed). OPM's Guide to the Senior Executive Services Qualifications provides detailed information on the ECQs. In addition to meeting the minimum qualifications, you must also demonstrate the following Executive Core Qualifications (ECQs) and Mandatory Technical Qualifications (MTQs): EXECUTIVE CORE QUALIFICATIONS (ECQs): By statute, OPM prescribes ECQs for the appointment of career SES members. The ECQs were designed to evaluate executive experience and not technical expertise. The following ECQs provide the focus for certification of executive core qualifications for initial appointment to the Senior Executive Service. Your two-page resume should show that you possess the Executive Core Qualifications. ECQ 1 - Commitment to the Rule of Law and the Principles of the American Founding: Demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. Leadership Competencies: Knowledge of the American System of Government, Commitment to the Rule of Law, Civic-Mindedness. ECQ 2 - Driving Efficiency: Demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. Leadership Competencies: Fiscal Responsibility, Managing Resources, Leveraging Technology. ECQ 3 - Merit and Competence: Demonstrated knowledge, ability, and technical competence to effectively and reliably produce work that is of exceptional quality. Leadership Competencies: Technical Skill, Problem Solving, Agility and Resilience. ECQ 4 - Leading People: Demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. Leadership Competencies: Accountability, Developing Others, Executive Judgement. ECQ 5 - Achieving Results: Demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors. Leadership Competencies: Operational Mindset, Innovation, Strategic Thinking. Additional information about the SES and ECQs can be found on the Office of Personnel Management (OPM) SES Website: Executive Core Qualifications. MANDATORY TECHNICAL QUALIFICATIONS (MTQs): In addition to the ECQs, candidates must address MTQs. MTQs are designed to assess an applicant's experience relevant to the specific position requirements. All applicants must clearly demonstrate in their two-page resume, experience and accomplishments related to the MTQs below: MTQ 1 - IT Security Operations Center (SOC): Demonstrated experience in leading and managing functions of day-to-day operations of a Security Operation Center (SOC), which provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions systems. MTQ 2 - IT Incident Response: Demonstrated executive knowledge of and experience in IT Incident Response. Demonstrated experience leading operations for a portfolio of enterprise IT Incident Response activities such as incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions. MTQ 3 - IT Threat Defense: Demonstrated experience in IT Threat Defense in terms of leading a cross-functional team of stakeholders to identify and implement protective controls that minimize an organization's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale. Please DO NOT submit separate documents addressing the ECQs or MTQs.

How You Will Be Evaluated

Your resume will be reviewed to ensure you meet the basic qualification requirements. If you meet the basic qualification requirements, your application will be referred to and evaluated by an executive panel. Highly Qualified applicants may undergo one or more interviews and/or be asked to provide a list of references or additional documents to confirm eligibility. The Executive Resources Board (ERB) will review results of the evaluation and make a written recommendation on the final selections to the appointing authority. Unless you have already been certified by the OPM Qualifications Review Board (QRB) in the past or received certification by an OPM approved Senior Executive Service Candidate Development Program, your qualifications must be certified by an OPM QRB before appointment may occur. If the selected candidate does not have Qualifications Review Board (QRB) certification by the Office of Personnel Management (OPM), the individual will be required to undergo an ECQ based structured interview with OPM to determine that you meet the leadership competencies required to serve as a member of the SES. REMINDER: Before uploading your required PDF documents, please ensure the resume DOES NOT EXCEED the noted page limits. Additional information about the SES and Executive Core Qualifications is available at http://www.opm.gov/policy-data-oversight/senior-executive-service/executive-core-qualifications/#url=Overview Other Information

Veterans' Preference: Is not applicable to positions in the Senior Executive Service. Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last five (5) years, a political Schedule A, Schedule C, Noncareer SES or Presidential Appointee employee in the Executive Branch, you must disclose this information on your resume and to the Human Resources Office. Equal Employment Opportunity Policy: The United States Government does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor. Equal Employment Opportunity (EEO) for federal employees & job applicants Reasonable Accommodation Policy: Federal agencies must provide reasonable accommodation to applicants with disabilities where appropriate. Applicants requiring reasonable accommodation for any part of the application process should follow the instructions in the job opportunity announcement. For any part of the remaining hiring process, applicants should contact the hiring agency directly. Determinations on requests for reasonable accommodation will be made on a case-by-case basis. A reasonable accommodation is any change to a job, the work environment, or the way things are usually done that enables an individual with a disability to apply for a job, perform job duties or receive equal access to job benefits. You can request a reasonable accommodation at any time during the application or hiring process or while on the job. Requests are considered on a case-by-case basis. Learn more about disability employment and reasonable accommodations or how to contact an agency. Legal and regulatory guidance Financial suitability Social security number request Privacy Act Signature and false statements Selective Service New employee probationary period This position requires that the successful candidate undergo personnel vetting, which includes a background investigation and enrollment upon onboarding into "Continuous Vetting." Enrollment in Continuous Vetting will result in automated record checks being conducted throughout one's employment with Treasury. The successful candidate will also be enrolled into FBI's Rap Back service, which will allow Treasury to receive notification from the FBI of criminal matters (e.g., arrests, charges, convictions) involving enrolled individuals in near real-time. Please review the three hyperlinks of your rights. (Noncriminal Justice Applicant's Privacy Rights - FBI, FD-258 Privacy Act Statement - FBI, and SEAD-3-Reporting-U.pdf (dni.gov)