IT Specialist (INFOSEC)
What you'd do
Join the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As a IT Specialist in OIS, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families.
Major duties
Works closely with other information security professionals , IT staff, and system owners to meet VA's information security program objectives and is responsible for ensuring the confidentiality, integrity, and availability of VA's systems, networks, and data. Serves as a National Data Center Information System Security Officer (NDC ISSO) and, within the ESO, Data Center Support Division (DCSD). Administers National Data Center (NDC) information security programs, through planning, analysis, development, implementation, maintenance, and enhancement of information systems programs, policies, procedures, and tools, under the leadership of the Deputy Director, DCSD. Assists with the development, recommendations, and implementation of procedures and standards within their area of responsibility, and provides an appropriate level of security, centered on acceptable risk, and industry best practice. Performs planning and assessment tasks by developing security for information systems, contingency plans and disaster recovery procedures. Recommends and contributes to developing policies and procedures regarding prevention of unauthorized access to NDC systems, networks, and data. Performs problem solving by contributing to the resolution of information security issues, applying relevant security principles and practices to develop compensating controls or solve operational issues. Champions security awareness by promoting awareness of security requirements among employees located at data centers and VA facilities; ensures sound security principles are reflected in all tasks to be accomplished. Assesses security events to determine impact; select and implement corrective actions as well as, gather and analyze data to provide focused reports on security compliance to appropriate oversight organization. This position is primarily aligned to the following NICE Cybersecurity Workforce Framework work role: Cyber Security Code 722 (Information Systems Security Manager): Responsible for the cybersecurity of a program, organization, system, or enclave. For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.us-cert.gov/workforce-development/cyber-career-pathways Position Description/PD#: IT Specialist (INFOSEC)/PD09173A Relocation/Recruitment Incentives: Not authorized Permanent Change of Station (PCS): Not authorized Financial Disclosure Report: Not required Travel Required: Occasional travel may be required as needed for this position. Work Schedule: Monday - Friday; 7:00AM-3:30PM Compressed/Flexible: As determined by the Agency Policy. Virtual: This is not a virtual position. Remote: This is not a remote position. Telework: This position may be authorized for ADHOC telework. Physical Demands: The work is sedentary. Some work may require walking and standing in conjunction with travel and to attendance at meetings and conferences away from the work site. Some employees may carry light items, such as papers, books, or small parts, or drive a motor vehicle. The work does not require any special physical effort. Working Conditions: The work area is adequately lighted, heated, and ventilated. The work environment involves everyday risks or discomforts that require normal safety precautions. Some employees may occasionally be exposed to uncomfortable conditions in such places as research and production facilities.
What you need to qualify
To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 07/29/2026. You must meet the Minimum Qualification Requirements, Specialized Experience and Selective Placement Factors to qualify for this series as described below. To qualify for this position, you must have information technology-related experience demonstrating all of the four competencies listed below. Ensure that this experience is clearly described in your resume: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. -AND- Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade in the normal line of progression for the occupation in the organization. Specialized experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT. Specialized Experience for this position is defined as experience in at least one of the following areas: Cybersecurity architecture; Applying the National Institute of Standards and Technology (NIST) Risk Management Framework and other relevant federal security policies and guidelines; Adapting to evolving cyber threats based on the Zero Trust security model; or Ensuring compliance with the Federal Information Security Modernization Act (FISMA) -AND- Selective Placement Factors: This position includes a skill, knowledge, ability or other worker characteristic basic to, and essential for, satisfactory performance of the job. Selective Placement Factors are a prerequisite to appointment and represent minimum requirements for a position. Applicants who do not meet it are ineligible for further consideration. Evidence of the Selective Placement Factor must be reflected in your resume. The Selective Placement Factors for this position are knowledge of principles, methods, and concepts of enterprise security to align information technology (IT) strategy, risks, plans, and systems with the mission, goals, structure, and processes of the organization.
Before you apply
Federal applications are different: your resume should be 3–5 pages and mirror the language of this announcement. Read our federal resume guide first — it's the #1 reason qualified people get screened out.
Don't miss the next one.
Get an email the moment a similar federal job opens — postings can close in as little as 5 days.