IT Specialist - Information Systems Security Auditor - Direct Hire
What you'd do
Positions under this announcement are being filled using a Direct Hire Authority (DHA), open to all U.S. citizens. Selections made under this bulletin will be processed as new appointments to the civil service. Current civil service employees would be given new appointments to the civil service. Under the provisions of the DHA, veteran's preference in selection does not apply.
Major duties
The incumbent plans, conducts, and reports on audits, and evaluations of the agency's IT systems to identify weaknesses, assess compliance with policies and regulations, and recommend improvements to strengthen security and reduce risk. Serves as an information systems security auditor. At the full performance level, auditors perform audits, in accordance with government auditing standards, to evaluate the: 1. Reliability and accessibility of SSA’s information systems; 2. Agency’s systems security contingency plans and disaster recovery procedures; 3. Design of SSA’s network and systems to ensure implementation of appropriate systems security policies; 4. Effectiveness of SSA’s controls to prevent and defend against unauthorized access to systems, networks, and data; and 5. Effectiveness of SSA’s information security programs, including vulnerability management, incident response, and security awareness.
What you need to qualify
Resumes exceeding two pages in length will not be considered. Please visit the new resume guidance for more information. READ ALL SECTIONS OF THIS ANNOUNCEMENT IN ITS ENTIRETY. THIS INFORMATION IS CRUCIAL TO SUBMITTING A SUCCESSFUL APPLICATION. If you are qualifying based on education please make sure you follow the instructions in the Education Section of this announcement including uploading a transcript with an award/confer date. Failure to do so can disqualify you for further consideration. Applicants must qualify for the series and grade of the posted position. Experience must be IT-related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. Your resume must provide sufficient experience and/or education, knowledge, skills, abilities, and proficiency of any required competencies to perform the specific position for which you are applying. To qualify for the 2210 IT Specialist series, the applicant must demonstrate the following competencies: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; know about available products and services; and is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to the competencies above, applicants must also meet the following minimum qualifications. Minimum Qualifications: Grade 9 : To qualify at the GS-9 level, you must have one of the following: A master's or equivalent graduate degree (see Education section); OR Successful completion of two full years of progressively higher level graduate education leading to a master's or equivalent graduate degree (see Education section); OR At least 52 weeks of specialized experience at the GS-7 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: interpreting and applying information security concepts, principles, methods, and practices; interpreting and applying government auditing standards and applicable laws, regulations, policies, and procedures; completing and documenting routine audit tasks, with limited assistance; presenting findings and conclusions to others; evaluating alternative solutions and recommending actions to solve problems. Minimum Qualifications: Grade 11: To qualify at the GS-11 level, you must have one of the following: A Ph.D. or equivalent doctoral degree (see Education section); OR Successful completion of 3 full years of progressively higher level graduate education leading to a Ph.D. or equivalent doctoral degree (see Education section); OR At least 52 weeks of specialized experience at the GS-9 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: interpreting and applying government auditing standards and applicable laws, regulations, policies, and procedures; completing and documenting audit tasks, with limited assistance; completing and documenting routine audit tasks, with limited assistance; presenting findings and conclusions to others, both orally and in writing; and developing and evaluating alternative solutions and recommending actions to solve problems. Minimum Qualifications: Grade 12: To qualify at the GS-12 level, you must have at least 52 weeks of specialized experience at the GS-11 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: independently interpreting and applying information security concepts, principles, methods, and practices; independently interpreting, applying, and explaining government auditing standards and applicable laws, regulations, policies, and procedures; completing and documenting complex or non-routine audit tasks; evaluating complex data and guiding others in analysis; evaluating issues, developing alternative solutions, and implementing actions to solve complex or non-routine problems; and presenting findings and recommendations to audit teams, upper management, and auditees in writing and orally. Minimum Qualifications: Grade 13: To qualify at the GS-13 level, you must have at least 52 weeks of specialized experience at the GS-12 level, or equivalent, which is in or related to the work of the position to be filled and has equipped the applicant with the knowledge, skills, and abilities to successfully perform the duties of the position. Such experience must include all of the following: independently interpreting, applying, and guiding others in interpreting and applying information security concepts, principles, methods, and practices; independently interpreting, applying, and guiding others in the identification, interpretation, and application of government auditing standards and applicable laws, regulations, policies, and procedures; guiding others in the performance of audit tasks; evaluating and reviewing complex data and analysis prepared by others; independently evaluating issues, developing alternative solutions, and implementing actions to solve complex or non-routine problems; and guiding others in the presentation of findings and recommendations to audit teams, upper management, and auditees, in writing and orally, to persuade others to adopt a course of action. Qualification standards and additional information for this position can be found here: Competency-Based Qualification Standard for the Information Technology Management Series, 2210
Before you apply
Federal applications are different: your resume should be 3–5 pages and mirror the language of this announcement. Read our federal resume guide first — it's the #1 reason qualified people get screened out.
Don't miss the next one.
Get an email the moment a similar federal job opens — postings can close in as little as 5 days.