Duties

Summary

The incumbent serves as an Information Systems Security Officer that supports the NHTSA IT Cybersecurity and Privacy program by ensuring security and privacy requirements are included in the system engineering process, supporting Risk Management Framework (RMF) task(s) in accordance with NIST Special Publication 800-37, including supporting security and privacy assessments and other audits requests.

Learn more about this agency

Responsibilities

The Information System Security Officer (ISSO) :

• Assist the Cybersecurity and IT security compliance of NHTSA IT cybersecurity program by supporting cybersecurity in the system engineering process, supporting Risk Management Framework (RMF) task(s) in accordance with NIST Special Publication 800-37, including supporting cybersecurity assessments and other audits requests, Information System Continuous Monitoring (ISCM), Contingency Planning, incident handling risk analysis and mitigation IT security baseline compliance and security (Role-based and Awareness) training, in accordance with supporting DOT policy, guidelines and NIST standards.
• Support NHTSA's SDLC and DevSecOps implementation by maintaining architecture diagrams, process and standard operation procedures documentation, and ensuring the integration and management of static code vulnerability detection applications into the process.
• Assist the Privacy Officer with reviewing and updating Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), and System of Record Notices (SORNs). This includes interfacing/coordinating with the System Owner (SO) that originates/has responsibility for the document to ensure the PIA/PTA/SORN contains appropriate information to be approved/adjudicated by DOT Privacy Office for inclusion in System Authorization package.
• Develop / update FIPS 199 Security Categorization document; ensure information type(s) and special considerations (if applicable) are defined, and update System Security Plans (SSP); ensuring discovered and identified system components, control implementation status are addressed.
• Assist the System Owners, Information Owners, and Information System Security Manager (ISSM) in recording all known security weaknesses of assigned information systems in the Plans of Action and Milestones (POA&M's) in accordance with DOT policy, guides and procedures. Includes developing Draft Plan of Action and Milestones (POA&M) for observed control level deficiencies or gaps control implementation(s) in accordance with DOT policy, guides and procedures and conduct quality assurance reviews of existing POA&Ms to ensure completeness, accuracy and identified solutions are cost effective.
• Support the information system contingency planning process in accordance with NIST SP 800-34 Revision and ensure contingency plan test exercises results are documented in an after-action report, and Lessons Learned corrective actions are captured for updating information in the Information Systems Contingency Plan (ISCP). Additionally, provide draft update contingency plans including Business Impact Analysis (BIA).
• Track security awareness training and specialized training for NHTSA program offices and IT staff on an annual basis.
• Provide support for development and collecting information for effective performance measures and metrics by ensuring the DOT enterprise information security management system. Cybersecurity Assessment and Management (CSAM) application /database accurately contains required information and supporting artifacts.

Travel Required

Not required

Supervisory status
No

Promotion Potential
13

Requirements

Conditions of Employment

• Must meet specialized experience stated in Qualifications section
• Submit application and resume online by 11:59 PM EST on the closing date
• Required documents must be submitted by the closing date.

CONDITIONS OF EMPLOYMENT:

• SELECTIVE SERVICE: Males born after 12/31/1959 must be registered for the Selective Service.
• TRAVEL EXPENSES: No funding or temporary duty travel expenses will be paid for by the agency offering this detail opportunity. It is recommended that the successful candidate be physically located in the Washington, DC area.

Qualifications

Interested Candidates

All interested candidates should submit a resume describing their background and experience. Candidates may also submit additional supporting documentation.

Submit the above information no later than COB on April 19, 2021 to Ivonne Rodriguez at Ivonne.Rodriguez@dot.gov .

Education

Additional information

PLEASE NOTE - THIS IS A DETAIL POSITION, NOT TO EXCEED 1 YEAR.

Notes: This detail is considered a detail to "unclassified duties" which means that that grade level, title and occupation series have not been assigned by a Classification Specialist. The candidate does not have to meet time-in-grade or OPM qualification requirements regarding one year of specialized experience. However, applications will still be screened for assurance that all required documents are submitted and that candidates' experience, skills, and background will allow for successful performance of the required duties.

An employee who is on detail is considered for pay and FTE purposes to be permanently occupying his or her regular position. Therefore, there is no change to the employee's grade or salary while serving on the detail.

This vacancy may be used by any DOT agency to fill similar positions within 90 days.

How You Will Be Evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

For this announcement, all applicants will be reviewed to determine if they meet the basic qualifications for this position, specifically the educational and specialized experience requirements.

Applicants will not be rated or ranked.

All applications that are verified to meet the basic qualifications will be referred to the selecting official.

All answers provided in the on-line process must be substantiated by a resume. If, upon review, it is determined that your resume and/or supporting documents do not support your answer choices, your application may be removed from consideration.

Ultimately, the Automated Staffing Office is responsible for determining an applicant's eligibility. Please ensure that your resume provide enough detail to support your answers to the Vacancy Specific Questions.

To preview questions please click here .

Background checks and security clearance

Security clearance
Other

Drug test required
No

Position sensitivity and risk
High Risk (HR)

Trust determination process
Suitability/Fitness

Required Documents

ALL Applicants must provide a resume that fully supports the required specialized experience and was created within USA Jobs Resume Builder and respond to the vacancy questions by the closing date of the vacancy. Formatted resumes can be uploaded when you arrive at the DOT application system. For assistance with the resume builder, please visit: https://www.usajobs.gov/Help/how-to/account/documents/resume/build/

The following is a list of documents that are only required based on the type of position and consideration for which you are applying.

Required for ALL Applicants

• RESUME - All interested candidates must submit a resume, most recent performance appraisal, current SF 50, and a statement addressing their interest in this detail opportunity as well as their applicable skills, experience, and background for the detail opportunity. May also upload resume, if desired, but application must include USAJobs BUILT resume.
• COMPLETED QUESTIONNAIRE - answered online as part of application process.

FEDERAL APPLICANTS: You must submit your most current and other SF-50(s) that verify your current position, highest competitive grade, full performance level, and eligibility as a federal applicant. DO NOT submit an award SF-50 as these often do not verify grade or eligibility. For consideration for a promotion, Box 4 of the SF-50 must show a date that is at least 52 weeks prior to the job announcement closing. We recommend submitting your last promotion SF-50, current SF-50 or within-grade increase SF-50. Pay adjustment raise SF-50s for the current year will not support the 52 weeks' time-in-grade requirements. https://www.usajobs.gov/Help/working-in-government/service/SF-50/

PERFORMANCE APPRAISALS/INCENTIVE AWARDS: If applicable, performance appraisals and/or Incentive award documentation may be submitted and will be forwarded to the selecting official as support in consideration of your application in the evaluation process. To receive due weight, you must submit a recent performance appraisal (dated within 18 months) showing the official rating of record, signed by a supervisor, or statement why the performance appraisal is unavailable (do not submit a performance plan) and/or incentive award documentation dated within the last 18 months (i.e. superior performance awards, special act or achievement awards, quality step increases, etc.)

Failure to submit any of the required documents by the closing date of the vacancy will result in your removal from consideration for this position. Please review your application prior to final submission and ensure you have submitted all appropriate documents. Uploading documents to USAJobs does NOT ensure inclusion with your application to our system.

If you are relying on your education to meet qualification requirements:

Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education .

Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating.