Information System Security Officer (ISSO) - Detail Opportunity
Department of Transportation
Location
1 vacancy in the following location :
Relocation expenses reimbursed
Telework eligible
Yes as determined by agency policy
Duties
Summary
The incumbent serves as an Information Systems Security Officer that supports the NHTSA IT Cybersecurity and Privacy program by ensuring security and privacy requirements are included in the system engineering process, supporting Risk Management Framework (RMF) task(s) in accordance with NIST Special Publication 800-37, including supporting security and privacy assessments and other audits requests.
Responsibilities
The Information System Security Officer (ISSO) :
- Assist the Cybersecurity and IT security compliance of NHTSA IT cybersecurity program by supporting cybersecurity in the system engineering process, supporting Risk Management Framework (RMF) task(s) in accordance with NIST Special Publication 800-37, including supporting cybersecurity assessments and other audits requests, Information System Continuous Monitoring (ISCM), Contingency Planning, incident handling risk analysis and mitigation IT security baseline compliance and security (Role-based and Awareness) training, in accordance with supporting DOT policy, guidelines and NIST standards.
- Support NHTSAs SDLC and DevSecOps implementation by maintaining architecture diagrams, process and standard operation procedures documentation, and ensuring the integration and management of static code vulnerability detection applications into the process.
- Assist the Privacy Officer with reviewing and updating Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), and System of Record Notices (SORNs).
This includes interfacing / coordinating with the System Owner (SO) that originates / has responsibility for the document to ensure the PIA / PTA / SORN contains appropriate information to be approved / adjudicated by DOT Privacy Office for inclusion in System Authorization package.
Develop / update FIPS 199 Security Categorization document; ensure information type(s) and special considerations (if applicable) are defined, and update System Security Plans (SSP);
ensuring discovered and identified system components, control implementation status are addressed.
Assist the System Owners, Information Owners, and Information System Security Manager (ISSM) in recording all known security weaknesses of assigned information systems in the Plans of Action and Milestones (POA&Ms) in accordance with DOT policy, guides and procedures.
Includes developing Draft Plan of Action and Milestones (POA&M) for observed control level deficiencies or gaps control implementation(s) in accordance with DOT policy, guides and procedures and conduct quality assurance reviews of existing POA&Ms to ensure completeness, accuracy and identified solutions are cost effective.
Support the information system contingency planning process in accordance with NIST SP 800-34 Revision and ensure contingency plan test exercises results are documented in an after-action report, and Lessons Learned corrective actions are captured for updating information in the Information Systems Contingency Plan (ISCP).
Additionally, provide draft update contingency plans including Business Impact Analysis (BIA).
- Track security awareness training and specialized training for NHTSA program offices and IT staff on an annual basis.
- Provide support for development and collecting information for effective performance measures and metrics by ensuring the DOT enterprise information security management system.
Cybersecurity Assessment and Management (CSAM) application / database accurately contains required information and supporting artifacts. Travel Required
Not required
Supervisory status
Promotion Potential
Requirements
Conditions of Employment
- Must meet specialized experience stated in Qualifications section
- Submit application and resume online by 11 : 59 PM EST on the closing date
- Required documents must be submitted by the closing date.
CONDITIONS OF EMPLOYMENT :
- SELECTIVE SERVICE : Males born after 12 / 31 / 1959 must be registered for the Selective Service.
- TRAVEL EXPENSES : No funding or temporary duty travel expenses will be paid for by the agency offering this detail opportunity.
It is recommended that the successful candidate be physically located in the Washington, DC area. Qualifications
Interested Candidates
All interested candidates should submit a resume describing their background and experience. Candidates may also submit additional supporting documentation.
Submit the above information no later than COB on April 19, 2021 to Ivonne Rodriguez at [email protected].
Education
Additional information
PLEASE NOTE - THIS IS A DETAIL POSITION, NOT TO EXCEED 1 YEAR.
Notes : *This detail is considered a detail to unclassified duties which means that that grade level, title and occupation series have not been assigned by a Classification Specialist.
The candidate does not have to meet time-in-grade or OPM qualification requirements regarding one year of specialized experience.
However, applications will still be screened for assurance that all required documents are submitted and that candidates experience, skills, and background will allow for successful performance of the required duties.*
An employee who is on detail is considered for pay and FTE purposes to be permanently occupying his or her regular position.
Therefore, there is no change to the employees grade or salary while serving on the detail.*
This vacancy may be used by any DOT agency to fill similar positions within 90 days.
How You Will Be Evaluated
You will be evaluated for this job based on how well you meet the qualifications above.
For this announcement, all applicants will be reviewed to determine if they meet the basic qualifications for this position, specifically the educational and specialized experience requirements.
Applicants will not be rated or ranked.
All applications that are verified to meet the basic qualifications will be referred to the selecting official.
All answers provided in the on-line process must be substantiated by a resume. If, upon review, it is determined that your resume and / or supporting documents do not support your answer choices, your application may be removed from consideration.
Ultimately, the Automated Staffing Office is responsible for determining an applicant's eligibility. Please ensure that your resume provide enough detail to support your answers to the Vacancy Specific Questions.
To preview questions please . Background checks and security clearance
Security clearance
Drug test required
Position sensitivity and risk
Trust determination process
ALL Applicants must provide a resume that fully supports the required specialized experience and was created within USA Jobs Resume Builder and respond to the vacancy questions by the closing date of the vacancy.
Formatted resumes can be uploaded when you arrive at the DOT application system. For assistance with the resume builder, please visit : + RESUME - All interested candidates must submit a resume, most recent performance appraisal, current SF 50, and a statement addressing their interest in this detail opportunity as well as their applicable skills, experience, and background for the detail opportunity.
May also upload resume, if desired, but application must include USAJobs BUILT resume.
COMPLETED QUESTIONNAIRE answered online as part of application process.
FEDERAL APPLICANTS : You must submit your most current and other SF-50(s) that verify your current position, highest competitive grade, full performance level, and eligibility as a federal applicant. DO NOT submit an aw