Note: The job is a remote job and is open to candidates in USA. The U.S. Department of Education’s Federal Student Aid provides information technology operations and cybersecurity services supporting FSA systems and strategic objectives. The Chief Information Security Officer serves as the senior cybersecurity leader, advising leadership, managing enterprise cyber risk, directing security operations, overseeing compliance and audits, and supervising cybersecurity personnel.

Responsibilities

• Serving as the principal advisor to leadership and acts as an Authorizing Official (AO) / Designated Representative under FISMA, establishing agency-wide IT security policies, managing enterprise cyber risk, and aligning security strategies with Department and OMB mandates
• Directing Security Operations Center (SOC) capabilities-including SIEM, network forensics, automated surveillance, and threat intelligence-to detect, analyze, and mitigate cyber threats, expedite incident response, and protect high-value assets and sensitive PII
• Overseeing vulnerability management, Continuous Diagnostics and Mitigation (CDM), and Authority to Operate (ATO) processes across cloud/data center hosting environments and enterprise applications, while enforcing strict cybersecurity contract standards across thousands of external partners and contractors
• Leading cybersecurity audit response and remediation across OIG, DHS, and federal oversight bodies; manages security budgets and contractor performance; and provides comprehensive executive supervision, mentorship, and workforce planning for assigned cybersecurity personnel
• Serving as the liaison and overseer of all FISMA, Financial, Office of the Inspector General, Department of Homeland Security, and other security audits

Skills

• Must be a US Citizen
• One year of experience in either federal or non-federal service that is equivalent to at least a AD-00 (GS-14 equivalent) performing two (2) out of three (3) of the following duties or work assignments:
• Experience leading enterprise-wide information security programs, including strategic planning, policy development, and advising on security risks, resources, and mission requirements aligned with Federal or industry standards and mandates (e.g., FISMA, OMB A-130, NIST)
• Experience directing and advising on enterprise risk management, security authorizations, and secure IT acquisitions compliance with security regulations, including applying RMF and SCRM to assess and mitigate risks across various IT, cloud, and vendor environments
• Experience providing strategic leadership and oversight of enterprise SOC and incident management programs containing critical cyber threats, including develop critical threat response, mitigation, incident response, and required reporting procedures
• IT-related experience (paid or unpaid experience and/or completion of specific, intensive training (e.g., IT certification), as appropriate) demonstrating each of the ten competencies listed below
• Accountability-Holds self and others accountable for measurable high-quality, timely, and cost-effective results. Determines objectives, sets priorities, and delegates work. Accepts responsibility for mistakes. Complies with established control systems and rules
• Customer Service- Anticipates and meets the needs of both internal and external customers. Delivers high-quality products and services; is committed to continuous improvement
• Decisiveness- Makes well-informed, effective, and timely decisions, even when data are limited or solutions produce unpleasant consequences; perceives the impact and implications of decisions
• Flexibility- Is open to change and new information; rapidly adapts to new information, changing conditions, or unexpected obstacles
• Integrity/Honesty- Behaves in an honest, fair, and ethical manner. Shows consistency in words and actions. Models high standards of ethics
• Interpersonal Skills- Treats others with courtesy, sensitivity, and respect. Considers and responds appropriately to the needs and feelings of different people in different situations
• Oral Communication- Makes clear and convincing oral presentations. Listens effectively; clarifies information as needed
• Problem Solving- Identifies and analyzes problems; weighs relevance and accuracy of information; generates and evaluates alternative solutions; makes recommendations
• Resilience- Deals effectively with pressure; remains optimistic and persistent, even under adversity. Recovers quickly from setbacks
• Written Communication- Writes in a clear, concise, organized, and convincing manner for the intended audience
• IT-related experience (paid or unpaid experience and/or completion of specific, intensive training (e.g., IT certification), as appropriate) demonstrating each of the seventeen competencies listed below
• Knowledge of cybersecurity laws, regulations, and standards-including the Federal Information Security Modernization Act (FISMA), NIST Risk Management Framework (RMF), OMB mandates, and Authorizing Official (AO) responsibilities-to manage enterprise cyber risk and maintain Authority to Operate (ATO) across mission-critical systems
• Skill in directing operational cybersecurity functions, Security Operations Center (SOC) technologies (such as SIEM, network forensics, and packet capture), and incident response frameworks to detect advanced threats, mitigate vulnerabilities, and protect Personally Identifiable Information (PII) and High-Value Assets (HVAs)
• Ability to oversee Continuous Diagnostics and Mitigation (CDM) and Information Security Continuous Monitoring (ISCM) programs, integrate security across system development lifecycles (SDLC/LMM), and enforce strict cybersecurity requirements across large-scale contractor, cloud hosting, and external partner ecosystems
• Skill in leading multidisciplinary technical teams, managing contractor deliverables and IT security budgets, and building strategic partnerships with executives, external oversight authorities, and audit entities (e.g., OIG, DHS, FISMA auditors) to remediate findings and achieve organizational goals

Benefits

• This position is eligible for Remote/Virtual work.
• Excused leave for Parent/Teacher Conferences (3 hours).
• Excused leave for annual health screenings (4 hours).
• Matching leave for community volunteer service.
• Alternative work schedules may be available.
• You may be eligible to receive a recruitment incentive for this position, subject to signing a service agreement obligating you to remain with the U.S. Department of Education for a specified period as agreed upon.
• You may be eligible to receive a relocation incentive for this position, subject to signing a service agreement obligating you to remain with the U.S. Department of Education for a specified period as agreed upon.
• You may be eligible to participate in the Student Loan Repayment Program as a recruitment incentive for this position, subject to signing a service agreement obligating you to remain with the U.S. Department of Education for a specified period as agreed upon.

Company Overview