Deputy Chief Information Security Officer

Summary

The Deputy Chief Information Security Officer leads a staff comprised of GS, GG, military, and contractor personnel, providing executive leadership, management, and oversight of Department-wide activities related to the Cybersecurity Framework functions of Identity, Protect, Detect, Respond, and Recover; cybersecurity workforce; Defensive Cyber Operations; cybersecurity integration, governance, and assurance; and cybersecurity for Internet of Things, Operational Technology, and weapons systems.

Duties

Major duties and responsibilities include, but are not limited to: Serves as the Deputy Chief Information Security Officer (CISO) and senior advisor to the Department of War Chief Information Security Officer on Department wide cybersecurity matters. Formulates and executes strategic cybersecurity governance frameworks, policies, procedures, and operational priorities to protect department-wide information systems, networks, and critical infrastructure, while driving decisions that align initiatives with overarching mission capabilities. Provides direction and oversight for implementation of the Cybersecurity Framework functions of Identify, Protect, Detect, Respond, and recover across the Department. Ensures cybersecurity efforts are aligned with department mission requirements and national security objectives. Advises the CISO and senior department leaders on significant cybersecurity risks, vulnerabilities, and emerging threats. Recommends actions to address identified risks while balancing cybersecurity requirements with operational and mission needs. Provides strategic direction and oversight for Defensive Cyber Operations and related cybersecurity activities. Assesses Department-wide requirements, establishes priorities, and recommends priorities and actions to improve cyber readiness and resilience. Evaluates the effectiveness of cybersecurity programs, policies, and initiatives and recommends changes based on the performance, mission requirements, emerging threats, and Department priorities. Supports the CISO with oversight for National Security Agency (NSA) Cybersecurity Directorate's execution of the NSA Information Systems Security Program Portfolio, including development and delivery of capabilities related to: cryptographic modernization, identity management solutions, including Public Key Infrastructure, Key Management Infrastructure, Cross Domain Solutions, and post-quantum cryptography.

Qualifications

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race, sex, color, religion, or national origin. To meet the minimum qualification requirements for this position, you must show that you possess the Executive Core Qualifications (ECQ), and Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit will be disqualified. Please see "Required Documents" section below for all resume formatting requirements. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position. Do NOT submit a separate narrative statement specifically addressing the Executive Core Qualifications (ECQs) or the Technical Qualifications (TQs). TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications: TQ 1: Extensive knowledge and experience leading and managing cybersecurity programs, policies, operations, and resources in support of large-scale cybersecurity missions, including cryptographic modernization, identity management solutions, Public Key Infrastructure, Cross Domain Solutions, Key Management Infrastructure, and post-quantum cryptography. TQ 2: Demonstrated knowledge and experience orchestrating the strategic alignment, deployment, and oversight of modernized Cybersecurity and Defensive Cyber Operations, ensuring enterprise-wide readiness and protection of vital critical asset infrastructures. EXECUTIVE CORE QUALIFICATIONS (ECQs): In addition to the Technical Qualification Requirements listed above, all new entrants into the Senior Executive Service (SES) under a career appointment will be assessed for executive competency against the following five mandatory ECQs. If your 2-page resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for the position. There are five ECQs: ECQ 1: Commitment to the Rule of Law and the Principles of the American Founding - This core qualification requires a demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. Sub-Competencies: Knowledge of the American System of Government: Demonstrates understanding and appreciation of the American system of government, including the Constitution, the Bill of Rights, separation of powers, federalism, and the historical development of the American Nation. Commitment to the Rule of Law: Upholds the principles of the American Founding, including equality under the law and democratic self-government. Ensures the law is applied fairly and consistently. Civic-Mindedness: Stays up-to-date on important developments in American government and aligns organizational objectives and practices with presidential and public interests. Demonstrates a commitment to serve the American people. ECQ 2: Driving Efficiency - This core qualification involves the demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. Sub-Competencies: Fiscal Responsibility: Strategically manages, allocates and monitors financial resources. Aligns priorities and initiatives to justify budget proposals. Monitors expenditures, cuts unnecessary costs, and uses cost-benefit analysis to set priorities. Managing Resources: Manages resources efficiently and effectively based on current and projected organizational goals, skills, budget considerations, and staffing needs. Leveraging Technology: Explores emerging technology and potential applications. Incorporates technology to enhance efficiency and achieve results. Ensures access to and security of technology systems. ECQ 3: Merit and Competence - This core qualification involves the demonstrated knowledge, ability and technical competence to effectively and reliably produce work that is of exceptional quality. Sub-Competencies: Technical Skill: Possesses the requisite technical knowledge and subject matter expertise to consistently produce timely, high-quality work. Is considered a strong contributor in his or her domain. Problem Solving: Engages in critical and data-driven thinking when diagnosing root causes and evaluating options. Identifies and promptly addresses the most pressing, high-priority problems. Agility and Resilience: Anticipates and adapts to change, new ideas, new information, and new conditions. Is committed to continuous improvement. Deals effectively with pressure and remains optimistic and persistent, even under adversity. ECQ 4: Leading People - This core qualification involves the demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. Sub-Competencies: Accountability: Ensures that employees are appropriately recruited, selected, appraised, trained, and retained. Takes swift action to address performance- or conduct-based