Information Technology Specialist (Security)

This position is located in the Defender Services Office (DSO) and will provide support to the Office Chief, Defender Services IT Program Officer, the National IT Operations and Applications Development Branch (NITOAD), and others on matters regarding IT security strategy, and implementation of IT security protocols, policies, procedures, and systems.

The Defender Services IT Security Officer (ISO) will perform professional and technical work related to the management of IT security policies, planning, development, implementation, training, and support for the Defender Services program. The incumbent must have knowledge of IT Security, including current industry standards, with the ability to interpret existing laws, policies, and regulations, advise on necessary modifications, and communicate with a diverse group of stakeholders as well as the present recommendations to policy makers (both technical and nontechnical persons).

The incumbent will also work closely with the Defender Services National IT Operations and Applications Development Branch (NITOAD) which is located in San Antonio, TX. The duties of this position include, but are not limited to:

1. Directing support and assistance on IT security-related matters including providing IT security guidance.
2. Coordinating/conducting IT security assessments and other risk assessment activities.
3. Collaborating with the judiciary's Chief ISO and others to assist with the creation and implementation of national security policies for federal defender organizations.
4. Working with NITOAD and federal defender organizations to establish system security baselines adhering to the judiciary's risk management framework.
5. Coordinating incident response for the Defender Services program within the agency.
6. Coordinating various reporting requirements (e.g., IT Security Scorecard, Data Categorization Workbook, etc.) and producing an annual security report.
7. Establishing a security strategy for the federal defender program aligning with judiciary cybersecurity strategy.
8. Developing security awareness training plans for the organization.
9. Advise the DSO IT Program Officer and relevant programmatic bodies on all matters pertaining to IT Security.

Applicants must have demonstrated experience as listed below. This requirement is according to the AO Classification, Compensation, and Recruitment Systems which include interpretive guidance and reference to the OPM Operating Manual for Qualification Standards for General Schedule Positions. Specialized Experience: Applicants must have at least one full year (52 weeks) of specialized experience which is in or directly related to the line of work of this position.

Specialized experience must demonstrate experience in ALL areas defined below: Provide IT security guidance, conduct risk assessments, and establish security baselines in accordance with the Risk Management Framework (RMF). Develop and implement cybersecurity policies and strategies; coordinate incident response and advise leadership on IT security matters.

Coordinate security reporting and compliance requirements and develop security awareness and training programs. Preferred experience: At least 5 years of IT security experience including experience with implementing security controls as defined in NIST 800-53 and the functions within the NIST Cybersecurity Framework 2.

0 Preferred education: Bachelor's degree preferred. Could substitute with certifications and experience (such as CISSP, CISM)

This position does not require education to qualify.