IT Cybersecurity Specialist

We're hiring a GS-12 IT Cybersecurity Specialist to plan, execute, and complete complex cybersecurity assignments. This position will implement and validate compliance with FISMA, NIST SP 800 53, and the RMF; conduct formal security assessments and audits; and collaborate across IT and business units to address cybersecurity risks. Open to all U.S. Citizens and ICTAP eligibles in the local commuting area.

Major duties include, but are not limited to:

1. Independently plan, execute, and complete complex cybersecurity assignments, applying advanced knowledge of information security principles, federal requirements, and enterprise IT environments.
2. Implement and validate compliance with FISMA, NIST SP 800-53, and the Risk Management Framework (RMF) by assessing controls, documenting artifacts, and recommending corrective actions.
3. Conduct formal security assessments, audits, and reviews, including evaluating controls, collecting evidence, and making risk determinations to ensure regulatory and departmental compliance.
4. Monitor enterprise systems to ensure cybersecurity controls remain effective and aligned with federal requirements.
5. Work collaboratively across IT, development, operations, and business units to identify, analyze, and resolve cybersecurity risks.
6. Ensure security requirements are integrated into new and modernized systems, cloud solutions, and emerging technologies.
7. Suggest and implement practical security solutions to meet compliance and operational requirements. Evaluate existing methods and procedures and recommends improvements for enhanced security and operational efficiency.
8. Partner with IT teams to identify, mitigate, and remediate vulnerabilities and ensure security measures are fully integrated.
9. Maintain accurate and complete information in CSAM and prepares standard or recurring cybersecurity reporting.
10. Participate in security awareness initiatives and stays current with evolving data privacy and cybersecurity trends to strengthen organizational security practices.