Supervisory IT Cybersecurity Specialist (INFOSEC)

Join the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Cybersecurity Specialist, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families.

Major duties

Supervises all areas and tasks within their assigned directorate, therefore must possess knowledge in all areas. Directly supervises teams within the formal CPCR audit and inspection process overseeing the remediation process for draft and final reports. Monitors performance of all employees assigned to team. Provides advice and guidance on a wide range and variety of complex IT issues. Makes decisions or recommendations that significantly influence important agency IT policies or programs. Ensures rigorous application of information security/information assurance policies, principles, and practices. Developes methods to monitor and measure risk, compliance, and assurance efforts. Serves as senior expert and consultant to top agency management officials to advise on integrating IT programs with other programs of equivalent scope and complexity. This position is primarily aligned to the following NICE Cybersecurity Workforce Framework work roles: 805: IT Program Auditor - Responsible for conducting evaluations of technology programs or their individual components to determine compliance with published standards. 612: Security Control Assessor - Responsible for conducting independent comprehensive assessments of management, operational, and technical security controls and control enhancements employed within or inherited by a system to determine their overall effectiveness. 422: Data Analyst - Responsible for analyzing data from multiple disparate sources to provide cybersecurity and privacy insight. Designs and implements custom algorithms, workflow processes, and layouts for complex, enterprise-scale data sets used for modeling, data mining, and research purposes. For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.cisa.gov/tools/cyber-career-pathways-tool Position Description/PD#: Supervisory IT Cybersecurity Specialist (INFOSEC)/PD20343A Recruitment Incentives: Authorized Permanent Change of Station (PCS): Not authorized Financial Disclosure Report: Required Travel Required: Occasional travel may be required as needed for this position. Work Schedule: Monday - Friday; 8:00am-4:30pm Compressed/Flexible: As determined by the Agency Policy. Virtual: This is not a virtual position. Remote: This is not a remote position. Bargaining Unit: No Physical Demands: The work is sedentary. Some work may require walking and standing in conjunction with travel and to attendance at meetings and conferences away from the work site. Some employees may carry light items such as papers, books, or small parts, or drive a motor vehicle. The work does not require any special physical effort. Occasionally work may be done in computer rooms, power and generator rooms and telecommunications rooms. Working Conditions: The work area is adequately lighted, heated, and ventilated. The work environment involves everyday risks or discomforts that require normal safety precautions. Some employees may occasionally be exposed to uncomfortable conditions in such places as computer rooms, emergency power rooms and telecommunications rooms.

Qualifications

To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 10/19/2026. You must meet the Minimum Qualification Requirements, Specialized Experience and Selective Placement Factors to qualify for this series as described below. Minimum Qualifications Requirements: To qualify for this position, you must have information technology-related experience demonstrating all of the four competencies listed below. Ensure that this experience is clearly described in your resume: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. -AND- Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade in the normal line of progression for the occupation in the organization. Specialized experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT. Specialized experience for this position is defined as supervising or leading a team of IT specialists and/or program analysts responsible for evaluating an organization's compliance with information security or risk management policies and standards; developing, interpreting, or recommending changes to information security/information assurance policies, procedures, or risk management frameworks (e.g., NIST Risk Management Framework) at an enterprise or agency-wide level; conducting or overseeing IT security audits, assessments, or reviews to identify vulnerabilities, determine compliance with published standards, and recommend mitigation strategies; and preparing and presenting findings, recommendations, or briefings to senior management officials on complex or controversial IT security/risk issues. -AND- Selective Placement Factor: This position includes a skill, knowledge, ability or other worker characteristic basic to -and essential for- satisfactory performance of the job. Selective Placement Factors are a prerequisite to appointment and represent minimum requirements for a position. Applicants who do not meet it are ineligible for further consideration. Evidence of the Selective Placement Factor must be reflected in your resume. Selective Placement Factor #1: Experience defining and applying principles and theories of common enterprise architecture and risk management approaches to include purpose (duty to protect), mission need (risk assessment), and controls (design controls to protect) aligned with the NIST RMF throughout the planning, programming, budgeting, and execution (PPBE) cycle. Selective Placement Factor #2: Experience holistically evaluating internal and external perspectives; conducts assessment of threats and vulnerabilities,determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and nonoperational situations. Evidence of all of these requirements must be reflected in your resume. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Note: A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. It is the policy of the VA to not deny employment to those who have faced financial hardships or periods of unemployment.

Education

There is no educational substitution for this position at this grade level.

Requirements

You must be a U.S. Citizen to apply for this job. Selective Service Registration is required for males born after 12/31/1959. Selectee is subject to background/suitability investigation. Complete the initial online assessment and USAHire Assessment, if required. To be considered for this position, applicants must complete all required steps in the process. Selected applicants will be required to complete an online onboarding process. Acceptable form(s) of identification will be required to complete pre-employment requirements (https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents). Effective May 7, 2025, driver's licenses or state-issued identification cards that are not REAL ID compliant cannot be utilized as an acceptable form of identification for employment. As a condition of employment for accepting this position, you will be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider:

• your performance and conduct;
• the needs and interests of the agency;
• whether your continued employment would advance organizational goals of the agency or the Government; and
• whether your continued employment would advance the efficiency of the Federal service.

Upon completion of your probationary period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. All required documents must be uploaded at the time you submit your application. The system supports only one submission. Applicants will not be able to edit their application or upload additional documents once it has been submitted. Applications that are incomplete-including those missing required documentation-will not be considered. Applicants are responsible for reviewing the Required Documents section and ensuring all mandatory materials are included prior to submission. Note: Applicants will not be contacted for missing information. It is the applicant's responsibility to provide all documentation necessary to determine qualification and eligibility.