IT Specialist (Information Security Officer)

Summary

This position is in the Department of the Chief Information Technology Officer, Product Development Office (PDO), System Readiness Division, Information Assurance Branch. PDO-SRD provides quality assurance, information security, and training for Judiciary applications and technologies by testing and validating systems, ensuring security compliance, and training judges, court staff, and Administrative Office employees on safe and reliable technology use.

Duties

The Information Technology Specialist serves as a cybersecurity analyst supporting the Mission Systems Security team as an Information Security Officer (ISO), responsible for security oversight, compliance, and governance for the Product Development Office's mission system application portfolio as well as any new systems or systems being modernized. The IT Specialist will be responsible for implementing the Judiciary Information Security Framework, completing assigned ISO duties, and security program risk management throughout the full lifecycle of software development and technology adoption - from collaborating with subject matter expert (SMEs) to advising security architect, administering continuous monitoring and tracking compliance reporting. As part of the Information Assurance Branch, the incumbent coordinates, plans, builds, and implements security controls and procedures to ensure the appropriate security posture is baselined and maintained throughout the supported programs. This position requires expertise in Client and Case management systems such as Management/Electronic Case Filing (CM/ECF), Probation and Pretrial Automation Tracking System, and acquired knowledge of cybersecurity and cloud security. Duties Include: Designing security controls, processes, and procedures for public, private, and hybrid cloud integrations to ensure compliance with judiciary and federal guidance. Analyzing security requirements for cloud implementation and integration. Implementing technology solutions dedicated to data protection in the cloud. Working closely with development teams to ensure that software security practices are implemented in all applicable environments, including public, private, and hybrid cloud. Developing systems security documentation and conducting systems security evaluations, audits, and reviews of various cloud environments. Conducting risk and vulnerability assessments of planned and installed informed systems. Developing and maintaining all security artifacts required for security authorization packages and IT scoreboards for cloud initiatives. Reviewing and providing recommendations for corrective action and/or remediation of discovered security weakness for public, private, hybrid, and cloud environments. Developing a partnership with the enterprise IT security office to address Judiciary security policies and coordinate national program security assessments for cloud initiatives. Ensuring appropriate application of security policies and procedures to maintain information systems reliability and accessibility when operating in a cloud environment. Providing government oversight of security processes and procedures conducted by contractor staff. Escalating issues and concerns to the Security Branch Chief. Providing regular status updates to stakeholders, including management, customers, etc. through various mediums.

Qualifications

Applicants must have demonstrated experience as listed below. This requirement is according to the AO Classification, Compensation, and Recruitment Systems which include interpretive guidance and reference to the OPM Operating Manual for Qualification Standards for General Schedule Positions. Specialized Experience: Applicants must have at least one full year (52 weeks) (preferably 5 years) of specialized experience which is in or directly related to the line of work of this position. Specialized experience is demonstrated experience in ALL of the following: Developing security documentation, managing risk for small and large-scale applications and knowledge of enterprise security tooling.

Education

This position does not require education to qualify.