What are the responsibilities and job description for the IT Specialist - Information Systems Security Auditor - Direct Hire position at Social Security Administration?
Click 'Apply' to see all locations.
Summary
Positions under this announcement are being filled using a Direct Hire Authority (DHA), open to all U.S. citizens. Selections made under this bulletin will be processed as new appointments to the civil service. Current civil service employees would be given new appointments to the civil service. Under the provisions of the DHA, veteran's preference in selection does not apply.
Duties
The incumbent plans, conducts, and reports on audits, and evaluations of the agency's IT systems to identify weaknesses, assess compliance with policies and regulations, and recommend improvements to strengthen security and reduce risk.Serves as an information systems security auditor. At the full performance level, auditors perform audits, in accordance with government auditing standards, to evaluate the:1. Reliability and accessibility of SSA’s information systems;2. Agency’s systems security contingency plans and disaster recovery procedures;3. Design of SSA’s network and systems to ensure implementation of appropriate systems security policies;4. Effectiveness of SSA’s controls to prevent and defend against unauthorized access to systems, networks, and data; and5. Effectiveness of SSA’s information security programs, including vulnerability management, incident response, and security awareness.
Qualifications
Resumes exceeding two pages in length will not be considered. Please visit the new resume guidance for more information. READ ALL SECTIONS OF THIS ANNOUNCEMENT IN ITS ENTIRETY. THIS INFORMATION IS CRUCIAL TO SUBMITTING A SUCCESSFUL APPLICATION. If you are qualifying based on education please make sure you follow the instructions in the Education Section of this announcement including uploading a transcript with an award/confer date. Failure to do so can disqualify you for further consideration. Applicants must qualify for the series and grade of the posted position. Experience must be IT-related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. Your resume must provide sufficient experience and/or education, knowledge, skills, abilities, and proficiency of any required competencies to perform the specific position for which you are applying. To qualify for the 2210 IT Specialist series, the applicant must demonstrate the following competencies: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; know about available products and services; and is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to the competencies above, applicants must also meet the following minimum qualifications. Minimum Qualifications: Grade 9 : To qualify at the GS-9 level, you must have one of the following: A master's or equivalent graduate degree (see Education section); OR Successful completion of two full years of progressively higher level graduate education leading to a master's or equivalent graduate degree (see Education section); OR At least 52 weeks of specialized experience at the GS-7 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: interpreting and applying information security concepts, principles, methods, and practices; interpreting and applying government auditing standards and applicable laws, regulations, policies, and procedures; completing and documenting routine audit tasks, with limited assistance; presenting findings and conclusions to others; evaluating alternative solutions and recommending actions to solve problems. Minimum Qualifications: Grade 11: To qualify at the GS-11 level, you must have one of the following: A Ph.D. or equivalent doctoral degree (see Education section); OR Successful completion of 3 full years of progressively higher level graduate education leading to a Ph.D. or equivalent doctoral degree (see Education section); OR At least 52 weeks of specialized experience at the GS-9 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: interpreting and applying government auditing standards and applicable laws, regulations, policies, and procedures; completing and documenting audit tasks, with limited assistance; completing and documenting routine audit tasks, with limited assistance; presenting findings and conclusions to others, both orally and in writing; and developing and evaluating alternative solutions and recommending actions to solve problems. Minimum Qualifications: Grade 12: To qualify at the GS-12 level, you must have at least 52 weeks of specialized experience at the GS-11 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: independently interpreting and applying information security concepts, principles, methods, and practices; independently interpreting, applying, and explaining government auditing standards and applicable laws, regulations, policies, and procedures; completing and documenting complex or non-routine audit tasks; evaluating complex data and guiding others in analysis; evaluating issues, developing alternative solutions, and implementing actions to solve complex or non-routine problems; and presenting findings and recommendations to audit teams, upper management, and auditees in writing and orally. Minimum Qualifications: Grade 13: To qualify at the GS-13 level, you must have at least 52 weeks of specialized experience at the GS-12 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: independently interpreting, applying, and guiding others in interpreting and applying information security concepts, principles, methods, and practices; independently interpreting, applying, and guiding others in the identification, interpretation, and application of government auditing standards and applicable laws, regulations, policies, and procedures; guiding others in the performance of audit tasks; evaluating and reviewing complex data and analysis prepared by others; independently evaluating issues, developing alternative solutions, and implementing actions to solve complex or non-routine problems; and guiding others in the presentation of findings and recommendations to audit teams, upper management, and auditees, in writing and orally, to persuade others to adopt a course of action. Qualification standards and additional information for this position can be found here: Competency-Based Qualification Standard for the Information Technology Management Series, 2210
Education
Providing Proof of Education or Substituting Education For information on providing proof of education or substituting education for experience, visit General Schedule Qualification Policies. If you are qualifying on the basis of education or satisfying an educational requirement, submit a copy of your transcripts that includes your name, the name of the educational institution, course title(s), number of credits, grade, and date of completion. Unofficial transcripts or screenshots of electronic/web transcripts with the required information will be accepted at the time of application. You must submit your transcripts according to the application submission details of this announcement. Documents will not be accepted via email or regular mail. If selected, you may be required to provide your official college transcripts prior to the effective date of the personnel action placing you into the new position. Foreign Education: If your transcripts show education completed in foreign colleges or universities, you must also provide documentation that the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs and such education has been deemed equivalent to that gained in a conventional/accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university.
Additional Information
This is a career-ladder position offering the opportunity for promotion leading up to the GS-13 grade level. Salary range listed is under 'Rest of U.S. (RUS)' locality pay table. Selectee's actual salary will vary depending on location being filled. To find out the salary range for your selected location, you can view the salary for each locality pay table here: General Schedule Additional selections may be made for this vacancy six months from the closing date of this announcement. This is a non-bargaining unit position. Selective Service: If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service System, or are exempt from having to do so under the Selective Service Law. See www.sss.gov. Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended and Americans with Disabilities Act 1990 as amended, that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request an RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments here: https://help.usastaffing.gov/Apply/index.php?title=Reasonable_Accommodations_for_USA_Hire As a condition of employment for accepting this position, you may be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider your performance and conduct; the needs and interests of the agency; whether your continued employment would advance organizational goals of the agency or the Government; and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. RESUME: Resumes cannot exceed two pages; please visit the new resume guidance for more information. Your resume must provide specific details as to how your experience meets the qualifications for this position. Experience statements (i.e., duties, specialized experience, or occupational assessment questionnaire) copied from this announcement and pasted into your resume will not be considered as a demonstration of your qualifications for this position. The resume should indicate if the work is full-time or part-time. Part-time work is prorated (e.g., if you work 20 hours per week for a 12-month period, you will be credited with 6 months of experience).
Do you have a desire to: help SSA manage its Social Security programs? analyze and solve problems? help and advise millions of retired and disabled individuals? work on a team to make a difference in people's lives and your own? Informational Note: Creating a my Social Security (mySSA) account is a convenient way to access your personal Social Security information online. While not required for this position or the application process, you may wish to learn more about the benefits of having a mySSA account by visiting www.ssa.gov/myaccount. The Office of the Inspector General (OIG), an independent component within the Social Security Administration (SSA), is responsible for carrying out the authorities established under the Inspector General Act of 1978 (5 U.S.C. Appendix). Within the OIG, the Office of Audit (OA) is charged with conducting and supervising independent audits and evaluations of SSA's programs, systems, and operations to determine whether they are operating efficiently, effectively, economically, and in compliance with applicable laws and regulations, and to prevent and detect fraud, waste, and abuse. OIG-OA identifies findings and makes recommendations to strengthen the integrity, accountability, and performance of SSA programs, systems, and operations. As required by law, OIG-OA keeps Agency leadership and Congress fully and currently informed about significant issues, deficiencies, and the status of corrective actions.
Summary
Positions under this announcement are being filled using a Direct Hire Authority (DHA), open to all U.S. citizens. Selections made under this bulletin will be processed as new appointments to the civil service. Current civil service employees would be given new appointments to the civil service. Under the provisions of the DHA, veteran's preference in selection does not apply.
Duties
The incumbent plans, conducts, and reports on audits, and evaluations of the agency's IT systems to identify weaknesses, assess compliance with policies and regulations, and recommend improvements to strengthen security and reduce risk.Serves as an information systems security auditor. At the full performance level, auditors perform audits, in accordance with government auditing standards, to evaluate the:1. Reliability and accessibility of SSA’s information systems;2. Agency’s systems security contingency plans and disaster recovery procedures;3. Design of SSA’s network and systems to ensure implementation of appropriate systems security policies;4. Effectiveness of SSA’s controls to prevent and defend against unauthorized access to systems, networks, and data; and5. Effectiveness of SSA’s information security programs, including vulnerability management, incident response, and security awareness.
Qualifications
Resumes exceeding two pages in length will not be considered. Please visit the new resume guidance for more information. READ ALL SECTIONS OF THIS ANNOUNCEMENT IN ITS ENTIRETY. THIS INFORMATION IS CRUCIAL TO SUBMITTING A SUCCESSFUL APPLICATION. If you are qualifying based on education please make sure you follow the instructions in the Education Section of this announcement including uploading a transcript with an award/confer date. Failure to do so can disqualify you for further consideration. Applicants must qualify for the series and grade of the posted position. Experience must be IT-related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. Your resume must provide sufficient experience and/or education, knowledge, skills, abilities, and proficiency of any required competencies to perform the specific position for which you are applying. To qualify for the 2210 IT Specialist series, the applicant must demonstrate the following competencies: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; know about available products and services; and is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to the competencies above, applicants must also meet the following minimum qualifications. Minimum Qualifications: Grade 9 : To qualify at the GS-9 level, you must have one of the following: A master's or equivalent graduate degree (see Education section); OR Successful completion of two full years of progressively higher level graduate education leading to a master's or equivalent graduate degree (see Education section); OR At least 52 weeks of specialized experience at the GS-7 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: interpreting and applying information security concepts, principles, methods, and practices; interpreting and applying government auditing standards and applicable laws, regulations, policies, and procedures; completing and documenting routine audit tasks, with limited assistance; presenting findings and conclusions to others; evaluating alternative solutions and recommending actions to solve problems. Minimum Qualifications: Grade 11: To qualify at the GS-11 level, you must have one of the following: A Ph.D. or equivalent doctoral degree (see Education section); OR Successful completion of 3 full years of progressively higher level graduate education leading to a Ph.D. or equivalent doctoral degree (see Education section); OR At least 52 weeks of specialized experience at the GS-9 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: interpreting and applying government auditing standards and applicable laws, regulations, policies, and procedures; completing and documenting audit tasks, with limited assistance; completing and documenting routine audit tasks, with limited assistance; presenting findings and conclusions to others, both orally and in writing; and developing and evaluating alternative solutions and recommending actions to solve problems. Minimum Qualifications: Grade 12: To qualify at the GS-12 level, you must have at least 52 weeks of specialized experience at the GS-11 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: independently interpreting and applying information security concepts, principles, methods, and practices; independently interpreting, applying, and explaining government auditing standards and applicable laws, regulations, policies, and procedures; completing and documenting complex or non-routine audit tasks; evaluating complex data and guiding others in analysis; evaluating issues, developing alternative solutions, and implementing actions to solve complex or non-routine problems; and presenting findings and recommendations to audit teams, upper management, and auditees in writing and orally. Minimum Qualifications: Grade 13: To qualify at the GS-13 level, you must have at least 52 weeks of specialized experience at the GS-12 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: independently interpreting, applying, and guiding others in interpreting and applying information security concepts, principles, methods, and practices; independently interpreting, applying, and guiding others in the identification, interpretation, and application of government auditing standards and applicable laws, regulations, policies, and procedures; guiding others in the performance of audit tasks; evaluating and reviewing complex data and analysis prepared by others; independently evaluating issues, developing alternative solutions, and implementing actions to solve complex or non-routine problems; and guiding others in the presentation of findings and recommendations to audit teams, upper management, and auditees, in writing and orally, to persuade others to adopt a course of action. Qualification standards and additional information for this position can be found here: Competency-Based Qualification Standard for the Information Technology Management Series, 2210
Education
Providing Proof of Education or Substituting Education For information on providing proof of education or substituting education for experience, visit General Schedule Qualification Policies. If you are qualifying on the basis of education or satisfying an educational requirement, submit a copy of your transcripts that includes your name, the name of the educational institution, course title(s), number of credits, grade, and date of completion. Unofficial transcripts or screenshots of electronic/web transcripts with the required information will be accepted at the time of application. You must submit your transcripts according to the application submission details of this announcement. Documents will not be accepted via email or regular mail. If selected, you may be required to provide your official college transcripts prior to the effective date of the personnel action placing you into the new position. Foreign Education: If your transcripts show education completed in foreign colleges or universities, you must also provide documentation that the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs and such education has been deemed equivalent to that gained in a conventional/accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university.
Additional Information
This is a career-ladder position offering the opportunity for promotion leading up to the GS-13 grade level. Salary range listed is under 'Rest of U.S. (RUS)' locality pay table. Selectee's actual salary will vary depending on location being filled. To find out the salary range for your selected location, you can view the salary for each locality pay table here: General Schedule Additional selections may be made for this vacancy six months from the closing date of this announcement. This is a non-bargaining unit position. Selective Service: If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service System, or are exempt from having to do so under the Selective Service Law. See www.sss.gov. Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended and Americans with Disabilities Act 1990 as amended, that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request an RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments here: https://help.usastaffing.gov/Apply/index.php?title=Reasonable_Accommodations_for_USA_Hire As a condition of employment for accepting this position, you may be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider your performance and conduct; the needs and interests of the agency; whether your continued employment would advance organizational goals of the agency or the Government; and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. RESUME: Resumes cannot exceed two pages; please visit the new resume guidance for more information. Your resume must provide specific details as to how your experience meets the qualifications for this position. Experience statements (i.e., duties, specialized experience, or occupational assessment questionnaire) copied from this announcement and pasted into your resume will not be considered as a demonstration of your qualifications for this position. The resume should indicate if the work is full-time or part-time. Part-time work is prorated (e.g., if you work 20 hours per week for a 12-month period, you will be credited with 6 months of experience).
Do you have a desire to: help SSA manage its Social Security programs? analyze and solve problems? help and advise millions of retired and disabled individuals? work on a team to make a difference in people's lives and your own? Informational Note: Creating a my Social Security (mySSA) account is a convenient way to access your personal Social Security information online. While not required for this position or the application process, you may wish to learn more about the benefits of having a mySSA account by visiting www.ssa.gov/myaccount. The Office of the Inspector General (OIG), an independent component within the Social Security Administration (SSA), is responsible for carrying out the authorities established under the Inspector General Act of 1978 (5 U.S.C. Appendix). Within the OIG, the Office of Audit (OA) is charged with conducting and supervising independent audits and evaluations of SSA's programs, systems, and operations to determine whether they are operating efficiently, effectively, economically, and in compliance with applicable laws and regulations, and to prevent and detect fraud, waste, and abuse. OIG-OA identifies findings and makes recommendations to strengthen the integrity, accountability, and performance of SSA programs, systems, and operations. As required by law, OIG-OA keeps Agency leadership and Congress fully and currently informed about significant issues, deficiencies, and the status of corrective actions.