INFORMATION TECHNOLOGY SPECIALIST (INFOSEC)

As an INFORMATION TECHNOLOGY SPECIALIST (INFOSEC) you will be responsible for the following duties: -Serve as an Information Systems Security Professional (ISSP) within the assigned region. -Perform Cybersecurity activities including security control assessments in support of Information Technology (IT) system assess and authorize activity utilizing the Risk Management Framework (RMF). -Exercise security oversight of cleared contractor information systems within the National Industrial Security Program (NISP). -Analyze, assess, evaluate, verify and validate cleared contractor information system security plans and controls, and deliver system authorization risk recommendations to the Authorizing Official. -Develop and maintain security documentation and artifacts for Information Systems assigned -Engage and interface with industry security professionals to assess implemented security controls. -Enforce IT security control requirements, recommend configurations for information systems and networks and identify strategies to manage risk through mitigation of IT vulnerabilities, considering the rapidly evolving Cybersecurity threat to IT systems. -Serve as spokesperson at conferences and training meetings to convey NISP and RMF implementation guidance and Cybersecurity information relating to industrial security.

The experience described in your resume will be evaluated and screened from the Office of Personnel Management's (OPMs) basic qualifications requirements.

See: https://www.opm.gov/policy-data-oversight/classification-qualifications/competency-based-policy/general-schedule/2200/2210-competency-based-policy/competency-based-qualification-standard/ for OPM qualification standards, competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 10/13/2026 Applicant must have directly applicable experience that demonstrates the possession of the knowledge, skills, abilities and competencies necessary for immediate success in the position.

Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies/knowledge, skills and abilities necessary to successfully perform the duties of the position.

You must have specialized experience sufficient to demonstrate that you have acquired all the competencies necessary to perform at a level equivalent in difficulty, responsibility, and complexity to the next lower grade GG/GS 12 in the Federal service and are prepared to take on greater responsibility.

Generally, this would include one year or more of such specialized experience.

Specialized experience for this position includes: Utilizing a wide range of Cybersecurity and advanced Information Technology concepts, principles, and practices to apply to difficult and complex work assignments; Identifying, documenting and communicating security plan vulnerabilities; Utilizing risk management principles to perform risk analysis; Evaluating and applying information assurance regulations, policies, and procedures to analyze operating/developmental computer systems and identifying deficiencies in their ability to safeguard classified data and information.

Specifically you will be evaluated on the following competencies: 1.

Cybersecurity: Support protection of the confidentiality, integrity, non-repudiation, and availability of systems, networks, and data through planning, analysis, development, penetration testing, access control, implementation, maintenance, and enhancement of information security systems, programs, policies, procedures, and tools. 2.

Oral Communication: Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 3.

Problem Solving: Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. 4. Risk Management: Knowledge of the principles, methods, and tools used for risk assessment and mitigation, including assessment of failures and their consequences. 5.

System Administration: Administer Information Technology systems to ensure effective system operation. 6.

Writing: Recognizes or uses correct English grammar, punctuation, and spelling; communicates information (for example, facts, ideas, or messages) in a succinct and organized manner; produces written information, which may include technical material, that is appropriate for the intended audience