IT Specialist (InfoSec) (Information Security Risk Threat Analyst)

This position is in the Office of the Chief Information Office (OCIO), Information Assurance Branch. The Information Assurance Branch manages the Agency's NIST Risk Management Framework (RMF) and Cybersecurity Framework (CSF 2.0) Programs. RMF integrates information security and risk management into the system development life cycle, overseeing Cybersecurity, Records Management, Security Compliance, Privacy, and IT Policy Programs.

As an IT Specialist (InfoSec) (Information Security Risk Threat Analyst), GS-2210-13, your typical work assignments may include: Detecting, assessing, and reporting security threats present in software and hardware. Installing and monitoring third-party installation used for viewing case evidence and for other purposes. Writing detailed technical reports, such as Security Risk Management Plans, summarizing findings of analyses and recommends changes to the agency's policies and procedures to mitigate security risks and threats. Making oral presentations to senior managers and other technical staff to persuade them to accepting findings and implement recommendations to prevent security breaches.

Performing other duties as assigned.