IT Specialist (Security), GS-2210-14, FPL GS-14 (DH)

Summary

This position is located in the U.S. Department of Education (ED), Federal Student Aid (FSA), Technology Directorate (TD). The Technology Directorate provides information technology services for all FSA systems, promoting the effective and secure use of technology to achieve FSA's strategic objectives through sound planning, investments, integrated technology architectures and standards, effective systems development, production support, and cybersecurity services.

Duties

APPLICATION LIMIT: This vacancy announcement is limited to the first 200 applications received and will close at 11:59PM Eastern Time on the day that we receive the 200th application, or at 11:59PM Eastern Time on the listed closing date, whichever occurs first. We encourage you to read this entire vacancy announcement prior to submitting your application. As an IT Specialist (Security), GS-2210-14, you will be responsible for: Managing the FSA Privacy Program, including development, planning, initiation, evaluation of privacy tools, and liaison with the Department's Senior Agency Official for Privacy (SAOP). Conducting Privacy Investigations and Incident Response including investigating computer incidents, gathers evidence, preserving incident artifacts, and supporting prosecution of computer crimes as a member of the Privacy Incident Response Team (PIRT). Promoting awareness of security and privacy issues among management and users while ensuring sound security principles are reflected in the organization's vision and goals. Providing advisory support including advising and supporting other IT security and privacy experts across FSA on a variety of situations and issues that involve interpreting or adapting new privacy principles, methods and practices. Conducting engagements with stakeholders on authorized systems and upcoming authorizations (ATO) for systems being hands on in completing PTA, PIAs.

Qualifications

Minimum Qualification Requirements You may meet the minimum qualifications for the GS-14, if you possess the specialize experience, education, or a combination of the two. Specialized Experience for the GS-14 One year of experience in either federal or non-federal service that is equivalent to at least a GS-13 performing two (2) out of three (3) of the following duties or work assignments: 1. Experience managing enterprise privacy compliance programs and implementing privacy controls in coordination with Senior Agency Official for Privacy (SAOP) or equivalent, and external partners. 2. Experience developing privacy guidance, evaluating and implementing privacy tooling, and ensuring compliance with the Privacy Act, e-Government Act, and FISMA (or equivalent requirements within the public sector) and preparing operational reports, monthly, weekly status reports and on-demand privacy reporting. 3. Experience leading and consulting with all stakeholders for creating, maintaining and finalizing required privacy documents for federally authorized systems (or equivalent) and for reviewing privacy documentation for completeness, consistency, accuracy, and compliance with applicable federal, departmental or equivalent organization-wide requirements. Basic Experience Requirements: Applicants may qualify by meeting or exceeding the minimum proficiency level established for each of the required competencies, in addition to meeting the specialized experience requirement as demonstrated through the assessment of skills. You must possess IT-related experience (paid or unpaid experience and/or completion of specific, intensive training (e.g., IT certification), as appropriate) demonstrating each of the nine competencies listed below. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (i.e., any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change. Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems. Interpersonal Skills- Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations. Oral Communication- Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving- Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Teamwork- Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals. Technical Competence- Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues. Knowledge, Skills, and Abilities (KSAs) The quality of your experience will be measured by the extent to which you possess the following knowledge, skills and abilities (KSAs). You do not need to provide separate narrative responses to these KSAs, as they will be measured by your responses to the occupational questionnaire (you may preview the occupational questionnaire by clicking the link at the end of the Evaluations section of this vacancy announcement). 1. Knowledge of federal or equivalent privacy laws and regulations in order to apply industry best practices to oversee and continuously improve an enterprise privacy program. 2. Knowledge of information systems and security principles in order to analyze privacy incidents, determine root causes, and implement effective corrective actions. 3. Ability to clearly communicate to promote privacy awareness throughout the organization. 4. Skill in analysis and consultation with the ability to interpret and adapt evolving privacy and security concepts to address diverse organizational challenges. 5. Ability to support the preparation, review, and maintenance of initial privacy screening (ie. Privacy Threshold Analyses (PTAs) or equivalent) , privacy impact and risk assessment (ie. Privacy Impact Assessments (PIAs) or equivalent) , and assist with stakeholders on preparation of personal data inventory and privacy notice documentation (ie. System of Records Notices (SORNs) or equivalent) , and related privacy documentation.

Education

Education cannot be substituted for experience for this position and grade level.