Job summary

Who may apply: Current, permanent DFAS employees in the competitive service, eligible DoD PPP Military Spouse preference applicants and current DFAS VRA employees.

Major duties

Provides assistance and guidance on matters pertaining to the Risk Management Framework. Provides authoritative evidence, advice, and guidance pertinent to IA program policies, guides, and standard operating procedures (SOPs) during all stages of the automation. Develops application security plans, policy guidance, operations regulations, and procedures to ensure IA regulatory requirements are followed in support of assigned applications and systems. Incumbent confirms that the security protections of newly developed system modifications are adequately tested and evaluated against all applicable DOD security standards. Conducts risk and vulnerability assessments of planned and installed information systems changes to identify vulnerabilities and protection needs and develops corresponding recommendations to reduce or eliminate risk.

Qualification

Basic Requirement: Applicants must have IT-related experience demonstrating the following competencies appropriate to, or above, the level of this position. For vacancies below the full-performance level of the position, the basic requirement will be evaluated on a developmental basis. Your resume and work experience should clearly support your ability to meet these competencies and will be evaluated as part of the entire application process. Attention to Detail - experience reviewing my own information technology-related work or data and have been asked by others to review their work or data to ensure accuracy, completeness, and consistency with standards. Customer Service - experience maintaining relationships with customers, assessing current information technology needs of customers, and developing or identifying information technology products and services that are tailored to meet customer needs. Oral Communication - briefing mid-level management and IT staff on the status of information technology systems, projects, or daily operations, including the communication of technical information to a non-technical audience. Problem Solving - identifying alternatives to address complex information technology-related issues by gathering and applying information from a variety of sources that provide a number of potential solutions. One year of specialized experience equivalent in level of difficulty and responsibility to that of the next lower grade (GS-11) within the federal service, which demonstrates the ability to perform the duties of the position, is required. Specialized Experience is defined as: Identifying, implementing, testing, and remediating issues in accordance with technical security requirements for assigned technologies, environments and systems; interpreting, managing, or facilitating changes to cybersecurity policies and procedures; conducting assessment procedures of security controls; assisting with the development of security controls for common IT processes (e.g., access management) based on best practices, policies, and laws. Time-in-Grade: Current or former federal employees who have held a GS position in the preceding 52 weeks, must meet the time in grade requirement. Applicant must have served 52 weeks as a GS-11 or higher grade in Federal Service. You may qualify for consideration if meeting time-in grade, specialized experience, education requirement, 90 days after competitive appointment requirement, and all other qualification requirements within 30 calendar days after the closing date of the announcement, unless otherwise indicated on the announcement.

Education

Education is not substitutable for specialized experience at the GS-12 grade level.

Evaluations

IMPORTANT NOTE - YOU MUST FOLLOW ALL APPLICATION INSTRUCTIONS CAREFULLY. ERRORS OR OMISSIONS MAY AFFECT YOUR RATING. All information included in the resume and Occupational Questionnaire is subject to review and verification. HR will review your resume and supporting documentation to ensure you meet the minimum qualification requirements. Applicants meeting the minimum requirements will be further evaluated based upon information you provided in the Occupational Questionnaire. If a determination is made that the work experience described in your submitted resume does not support your responses to the self-assessment questionnaire, your score may be reduced, and you may lose consideration for this position. If you are already a DFAS employee, you may be subject to disciplinary action, up to and including removal from Federal service, if you are found to have exaggerated, embellished, inflated, mischaracterized, or falsified your resume or qualifications. The Assessment Questionnaire takes approximately 15 minutes to complete and collects information on your education, training and experience related to the following critical competencies: Customer Service Information Systems/Network Security Risk Management Technical Competence You may preview the assessment questionnaire here: https://apply.usastaffing.gov/ViewQuestionnaire/12627231 DFAS recognizes the value of competencies gained through formal education and professional certifications. To ensure that consistent credit is given for these credentials in the selection process, DFAS has developed standard selection criteria to be used when filling positions in professional and administrative series. Selections for professional and administrative positions will be based on four categories of selection criteria: Experience, Other, Education, and Certifications.