Supervisory IT Cybersecurity Specialist-Direct Hire

The Chief Information Security Officer (CISO) will work in the Office of Science and Technology (OST), Office of Cybersecurity. This position supports enterprise IT capabilities that enable ATF's regulatory, criminal enforcement, and administrative missions. Direct-Hire Authority (DHA) is a hiring authority granted by the Office of Personnel Management (OPM) to address critical hiring needs or severe candidate shortages

The major duties of the Supervisory IT Cybersecurity Specialist position include, but are not limited to, the following: Develops, establishes, interprets, and directs agency-wide cybersecurity policies, standards, priorities, governance mechanisms, and implementation strategies Ensure enterprise systems and technology services maintain compliance with applicable Federal information security requirements, including FISMA-related responsibilities and NIST security standards and guidance.

Oversee enterprise cybersecurity operations and the continuous monitoring of networks, systems, and automated security controls to identify, prioritize, and mitigate threats and vulnerabilities. Establishes program priorities, objectives, performance measures, and resource requirements for the Office of Cybersecurity/IT Security organization.

Serves as first-level supervisor for assigned professional and administrative employees and provides direction and oversight to contractor support personnel.

To qualify for the Supervisory IT Cybersecurity Specialist position at the GS-15 grade level, candidates must meet the following specialized experience by the closing date of this announcement. Specialized experience is demonstrated experience, which has equipped the applicant with the particular knowledge, skills and abilities to perform successfully the duties of this position.

Experience must be in the normal line of progression or must be related to the work of the position advertised and must be reflected in resume. EXPERIENCE: C andidates must have at least one year of specialized experience equivalent to the next lower grade level (GS-14) (obtained in either the public or private sectors).

This experience must include all of the following : Serving as a technical authority in cybersecurity theories, principles, concepts, standards, methods, and practices; AND Managing enterprise-level security programs involving Federal information security law and policy, Office of Management and Budget (OMB) requirements, National Institute of Standards and Technology (NIST) guidance, the Federal Information Security Modernization (FISMA) Act, security control assessment, authorization decision support, continuous monitoring strategy, vulnerability remediation, and coordinated incident response; AND Implementing and maintaining cybersecurity resilience for enterprise systems and technology services to ensure compliance with applicable Federal information security requirements; AND Directing agency cybersecurity risk-management activities, including execution of the Risk Management Framework (RMF), authorization processes, security control assessments, continuous monitoring, vulnerability management, and development and tracking of Plans of Action and Milestones (POA&M); AND Integrating cybersecurity requirements into enterprise architecture, technology investments, acquisition processes, business workflows, and law-enforcement mission operations.

Your resume must support your responses to the application questionnaire and the qualification requirements. Failure to do so may result in an ineligible rating. See the Required Documents section for important notes about what must be included in your resume. After you submit this application, you will receive an e-mail informing you that a USA Hire assessment is required of you.

You will have 48 hours from the closing date of this announcement (11/03/2026) to complete the assessment as this assessment is part of your application.

Some federal jobs allow you to substitute your education for the required experience in order to qualify. For this job, you must meet the qualification requirement using experience alone. No substitution of education for experience is permitted.