Supv IT Specialist (Infosec)

This position is located within the Office of Information Technology (OIT), Office of Information Security (OIS), Information of Security Policy and Strategy (SPS), Information Security Risk Management (ISRM). the incumbent serves as an Information Technology Specialist with an Information Security (Infosec) speciality.

Qualifications:

To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 04/29/2026.

You may qualify based on your experience as described below:

• Basic Requirements: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the five competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled.
• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

• Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade GS-13 in the normal line of progression for the occupation in the organization. Examples of specialized experience would typically include, but are not limited to:
• Experience in executing risk management functions and ensuring compliance with NIST RMF, including managing risk assessments, developing mitigation strategies, and conducting security authorization reviews to assess and implement security controls.
• Experience in supervising and managing cybersecurity teams, setting goals, assigning tasks, coaching, evaluating performance, and coordinating training activities to maintain team effectiveness and up-to-date knowledge on cybersecurity threats and technologies.
• Experience in developing, implementing, and overseeing information security policies in alignment with regulations, conducting compliance audits, and providing policy guidance to ensure the organization's cybersecurity stance adheres to regulatory requirements.

AND

Selective Placement Factor: In addition to the minimum qualifications described above, you must meet the following requirements to be considered for the position: Must have experience directly leading and supervising.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religions; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Note: A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment.

Veterans and Transitioning Service Members: Please visit the VA for Vets site for career-search tools for Veterans seeking employment at VA, career development services for our existing Veterans, and coaching and reintegration support for military service members.
For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/.

Responsibilities:

OIT Mission: The mission of the Office of Information and Technology (OIT) is to collaborate with our business partners to create the best experience for all Veterans.

OIT Vision: To become a world-class organization that provides a seamless, unified Veteran experience through the delivery of state-of-the-art technology.

Major Duties:

• Ensures that all acquisitions, procurements, and outsourcing efforts address information security requirements consistent with organizational goals.
• Responsible for the analysis and development of the integration, testing, operations, and maintenance of systems security.
• Identifies and integrates internal and external program issues affecting the immediate organization, such as those involving technical, financial, organizational, and administrative factors.
• Conceptualizes, designs, and builds secure information technology (IT) systems, with responsibility for aspects of systems and/or networks development.
• Performs supervisory or managerial duties and objectives to assigned team members and assists team in organizing to accomplish work.
• Coaches, facilitates, solves work problems, and participates in the work of the team.
• Plans, assigns, reviews and accepts, amends, or rejects work done by team and subordinates.
• Assigns performance ratings, approves awards, and takes performance-based corrective actions.
• Performs security reviews and identifies security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.

Work Schedule: Monday-Friday, 8am-4:30pm
Compressed/Flexible: As determined by the Agency's Policy
Telework: Adhoc telework may be authorized at management's discretion.
Virtual: This is not a virtual position.
Position Description/PD#: Supv IT Specialist (Infosec)/PD17910A
Relocation/Recruitment Incentives: Not Authorized
Permanent Change of Station (PCS): Not Authorized
PCS Appraised Value Offer (AVO): Not Authorized

Physical Demands: The work is sedentary. Some work may require walking and standing in conjunction with travel and attendance at meetings and conferences away from the work site and carrying light items such as papers or books.

Working Conditions: The work area is adequately lighted, heated, and ventilated. The work environment involves everyday risks or discomforts that require normal safety precautions. This position requires frequent travel. The incumbent may be required to use both air and ground transportation.

Designated Drug Testing Position: Not applicable.

This is a non-bargaining unit eligible position.

Salary : $125,776