Security Control Assessor

Summary

The Office of Information Systems Management, IT Security and Networking Division, is seeking a Security Control Assessor to lead robust Assessment and Authorization (A&A) activities, ensure Federal Information Security Management Action (FISMA) compliance, and act as a vital line of defense in mitigating IT security risks across the agency. This notice is issued under direct-hire authority to recruit new talent to occupations for which NIST has a severe shortage of candidates.

Duties

Working as a Security Control Assessor in the Office of Information Systems Management, IT Security and Networking Division, you will perform the following duties: Conduct Assessment & Authorization (A&A) activities on NIST systems in accordance with Federal Information Security Management (FISMA) requirements. This includes conducting security documentation reviews to ensure control implementation is described appropriately, conducting security assessments to verify control implementation against the security controls required for a given system impact level, conducting secure configuration assessments, and documenting the risks and plans of action & milestones for mitigating IT security risks identified within the system. Qualifications

Selective Placement Factor: Applicants must possess a current/active IT Security Certification (e.g., CISSP, GIA, SSCP, CEH, GCIH, CISA, CGRC). A current/active copy of your certification must be provided in your application package. Specialized Experience: In addition to meeting the selective placement factor, applicants must have one year (52 weeks) of specialized experience equivalent to at least the GS-12 level (ZP-III at NIST). Specialized experience is defined as: Conducting detailed security assessments against Special Publication 800-53 Revision 5 security controls Developing security authorization documents (i.e., Systems Security Plans, Risk Assessments, Security Categorization, Privacy Impact Assessment, Test and Evaluation, and Contingency Plans) Reviewing security authorization packages Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. The qualification requirements in this vacancy announcement are based on the U.S. Office of Personnel Management (OPM) Qualification Standards Handbook. If requesting reconsideration of your qualification determination, please refer to the following site: Applicant Reconsideration

Education

Qualifications are based upon meeting specialized experience only. Education cannot be used to qualify for this position. How You Will Be Evaluated

Please prepare a resume that is no longer than two pages; only the first two pages will be considered during the review process. Ensure your font is 11 points or larger and upload your resume as a .pdf document. This helps ensure your formatting looks exactly the way you intended. How you will be evaluated: You will be evaluated for this job based on how well you meet the qualifications above. Once the announcement has closed, a review of your resume and supporting documentation will be used to determine whether you meet the qualification requirements listed in this announcement. Overstating your qualifications and/or experience in your application materials or application questionnaire may result in your removal from consideration. Subject Matter Experts (SMEs) may be used to review your resume to determine your technical qualifications for this position based on the required specialized experience. SMEs will review ONLY two (2) pages of your resume. SMEs will not review additional information beyond your resume. Applications will be assessed on the following competencies: Attention to Detail Customer Service Oral Communication Problem Solving Referral: All applicants may be referred to the selecting official for consideration. Under Direct Hire Authority, applicants are not rated and ranked, and veteran preference does not apply. CTAP or ICTAP eligibility: If you are a displaced or surplus Federal employee eligible for the Career Transition Assistance Plan (CTAP) or Interagency Career Transition Assistance Plan (ICTAP), you must be determined eligible and rated as well-qualified to receive special selection priority. "Well Qualified" means that in addition to meeting the minimum qualification requirements and selective placement factor(s), if applicable, you must receive a score of 85 or higher. Please review the following site regarding required documents to support CTAP or ICTAP eligibility and additional information regarding this authority - CTAP/ICTAP Eligibility Other Information

This position is covered under NIST's Alternative Personnel Management System (APMS), a pay-for-performance system with excellent HR flexibilities to help NIST recruit and retain top talent. Learn more about the APMS here! We may share your application package with other selecting officials. Additional selections may be made through this vacancy. Click all links in this vacancy announcement to view additional information or instructions. You MUST select at least ONE ELIGIBILITY to be considered for this position. All documents submitted for this announcement must be legible to make qualification or eligibility determinations. A probationary period may be required. NIST strives to build a flexible and encouraging work environment to bring out the best in our employees. To help our employees balance responsibilities at home and at work, NIST offers a variety of work-life flexibilities. For more information, please visit our Careers website.