Summary DCSA Office of Chief Information Officer is seeking a Chief Information Security Officer (CISO) to lead the cybersecurity program for DCSA. The CISO is responsible for the Agency cyber risk management program and leading incident response. The incumbent establishes the direction of DCSA cybersecurity strategies and policies to include systems, personnel, management practices and budget priorities. Responsibilities DUTIES: As the Chief Information Security Officer (CISO), the position will be responsible for the following duties: Overseeing security awareness and training to inform personnel, including contractors and other users of information security risks associated with their activities and responsibilities in complying with agency policies and procedures designed to reduce these risks. Establish cybersecurity policies, procedures standards, and guidelines This includes codifying procedures for detecting, reporting and responding to cybersecurity incidents, which shall be consistent with the standards and guidelines in DoD cybersecurity policies as well as playing a key role in security incident planning, response and recovery. Responsible for overseeing agency-wide cybersecurity activities as the senior authority on information assurance and cybersecurity related matters for DCSA. Establishes and manages the cyber risk program. Delegated authority to manage and direct all aspects of cybersecurity staff functions in consonance with instructions from the DCSA CIO. Champions cybersecurity initiatives by ensuring the agency is increasing the safety and security of DCSA services, and implementing the requirements contained in United States Code 44, Executive Orders, Department of Defense Directives and Instructions, National Institute on Standards and other Federal Laws, regulations and Acts. Establish cybersecurity and privacy related policies and processes for internal IT management functions needed to effectively coordinate the large portfolio of activities while continuously identifying, assessing and prioritizing IT risks to DCSA data and systems. Provide direction, oversight and compliance of the policies and procedures in DoD Directive (DoDD) 8140 to align, manage, and standardize cyber work roles, baseline qualifications, and training requirements. Requirements Conditions of Employment Qualifications TECHNICAL QUALIFICATIONS (TQ): All applicants must submit written statements (narrative format) of accomplishments that would satisfy the technical qualifications. You must address each technical qualification separately. Please limit your written statements to 2 pages per technical qualification. 1. Senior-level leadership experience and ability to bring about strategic change through use of information technology, both within and outside the organization, to meet organizational goals. 2. Demonstrated ability and experience leading a large complex organization, with multiple missions and functional support requirements. Ability to lead people toward meeting a large complex and multifunctional organization's vision, mission and goals. 3. Demonstrated ability and experience working at senior levels of the Department of Defense to build strategic alliances, and coalitions internally, with Congress, other Federal agencies, private sector organizations, foreign governments, or international organizations to achieve mutual goals. 4. Knowledge and expertise to evaluate, leverage and incorporate technical capabilities to meet organizational goals and customer expectations. Ability to make decisions that produce high quality results by applying technical knowledge, analyzing problems and calculating risks. Joint Duty Credit: All DCSA executive level positions require Joint Duty Credit. Unless a waiver is approved (see Note below), only those candidates who meet the Joint Duty Credit requirement will be eligible to compete/be considered for a senior executive position. Employees will receive joint duty credit for almost any rotational assignment to another IC component and may also be eligible to receive credit for service outside the IC (military, other government, or private sector) that was at least at the GS/GG-11 or DCIPS Pay Band 3 level, that occurred on or after September 11, 2001. An external candidate, if selected, will be required to immediately apply for Joint Duty credit. Note: Employees without Joint Duty Credit may apply for the position and can be considered. If selected, a waiver would be required prior to final appointment. DCSA seniors without Joint Duty at the same tier level may lateral into the position if selected without requesting a waiver. Desired Certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Privacy Professional (CIPP), Certified Ethical Hacker (CEH) and Project Manager Professional (PMP) Education This position does not have a positive education requirement. Additional Information Please review the General Application Information and Definitions at: http://www.dla.mil/Portals/104/Documents/Careers/downloads/DoDGenAppinfo.pdf Other Notes: If selected, Federal employees currently serving in the competitive service must acknowledge that they will voluntarily leave the competitive service by accepting an offer of employment for a DCIPS excepted service positions. If selected, non-DCIPS candidates must acknowledge in writing that the position they have been selected for is in the excepted service and covered by DCIPS. Selection under this appointment authority does not confer civil service competitive status. All current and former Federal employees must submit a copy of your latest SF-50 (Notification of Personnel Action) showing your tenure, grade and step, and type of position occupied (i.e., Excepted or Competitive); or similar Notification of Personnel Action documentation, i.e., Transcript of Service, Form 1150, etc. Resumes should NOT include: Classified information/SSN/Photo of yourself/personal information (gender, religion, affiliation etc/Encrypted digitally signed docs). Resumes with this prohibited information will be automatically ineligible for consideration.