Department: Department of Veterans Affairs
Location(s): Salt Lake City, Utah, Seattle, Washington, Phoenix, Arizona, Los Angeles, California, San Francisco, California, Denver, Colorado, Washington, District of Columbia, Miami, Florida, Atlanta, Georgia, Chicago, Illinois, Indianapolis, Indiana, New Orleans, Louisiana, Boston, Massachusetts, Minneapolis, Minnesota, Kansas City, Missouri, Albuquerque, New Mexico, New York, New York, Oklahoma City, Oklahoma, Portland, Oregon, Austin, Texas
Salary Range: $105383 - $137000 Per Year
Job Summary: This position is located in the Office of Information and Technology (OIT), Office of Information Security (OIS)/Information Security Risk Management Office. The primary purpose of the position is to collect, analyze, report, and provide support for information security compliance and oversight activities. These activities include information that overviews VA's information security posture to various oversight agencies throughout Federal government.
Major Duties:
Qualifications: To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 05/13/2026. You may qualify based on your experience as described below: Basic Requirements Experience: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the five competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND Selective Placement Factor: In addition to the minimum qualifications described above, you must meet the following requirement(s) to be considered qualified for the position: Documented hands-on experience applying the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) to federal information systems, including performing or supporting security authorization activities such as security control selection, assessment, and/or continuous monitoring in a federal government environment (Federal contractor experience applying NIST RMF to federal systems included). AND Specialized Experience: You must possess a minimum of one (1) year of experience equivalent to at least the GS-12 level. Specialized experience for this position is defined as: Information Security Compliance and Oversight Experience collecting, analyzing, and reporting on information security compliance data to support oversight activities; maintaining records of security requirements from sources including existing policy, guidelines, standards, legislation, and other external mandates; and identifying and documenting system deficiencies using Governance, Risk, and Compliance (GRC) tools or equivalent systems. Security Assessment and Authorization Experience conducting or directly supporting Assessment and Authorization (A&A) activities, including one or more of the following: developing or reviewing System Security Plans (SSPs); performing or supporting security control assessments; documenting Plan of Action and Milestones (POA&Ms); and/or supporting continuous monitoring programs for information systems. Information Security Policy and Strategy Development Experience developing, interpreting, or implementing information security policies, procedures, or strategies in compliance with federal laws and regulations, including the Federal Information Security Modernization Act (FISMA); and providing security guidance or recommendations to technical and non-technical stakeholders such as system owners, program managers, or Information System Security Officers (ISSOs). Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religions; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Note: A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. Veterans and Transitioning Service Members: Please visit the VA for Vets site for career-search tools for Veterans seeking employment at VA, career development services for our existing Veterans, and coaching and reintegration support for military service members.
How to Apply: Please read the entire announcement and all the instructions before you begin an application. To apply for this position, you must complete the initial online application, to include the initial online questionnaire and submission of the required documentation specified in the How to Apply and Required Documents section. The complete application package must be submitted by 11:59 PM (ET) on the closing date of the announcement to receive consideration. To preview the application questionnaire, click https://apply.usastaffing.gov/ViewQuestionnaire/12955074. The application process is as follows: To begin, click Apply Online to create a USA JOBS account or log in to your existing account. Follow the prompts to select your USA JOBS resume and/or other supporting documents. Answer the questions presented in the application and attach all necessary supporting documentation. Click the Submit Application button prior to 11:59 PM (ET) on the announcement closing date, 05/13/2026. NOTE: It is your responsibility to ensure your responses and appropriate documentation is submitted prior to the closing date. If you are required to complete any USA Hire Assessments, you will be notified after submitting your application. The notification will be provided in your application submission screen and via email. The notification will include your unique assessment access link to the USA Hire system and the completion deadline. Additionally, in USAJOBS you can click "Track this application" to return to your assessment completion notice. Access USA Hire using your unique assessment link. Access is granted through your USAJOBS login credentials. Review all instructions prior to beginning your assessments. You will have the opportunity to request a testing accommodation before beginning the assessments should you have a disability covered under the Rehabilitation Act of 1973 as amended. Set aside at least 3 hours to take the USA Hire Assessments; however, most applicants complete the assessments in less time. If you need to stop the assessments and continue later, you can re-use your unique assessment link. NOTE: Your responses to the USA Hire Assessments will be reused for one year (in most cases) from the date you complete an assessment. If future applications you submit require completion of the same assessments, your responses will be automatically reused. For more general information, system requirements, reasonable accommodation information, and to request assistance regarding the USA Hire Assessments, review the following resources: https://help.usastaffing.gov/Apply/index.php?title=USA_Hire_Assessments To update your application, including supporting documentation: During the announcement open period, return to your USAJOBS account, find your application record, and click Edit my application. This option will no longer be available once the announcement has closed. To view the announcement status or your application status: https://www.usajobs.gov/Help/howto/application/status/. Your application status page is where you can view your application status, USA Hire assessment completion status, and review your notifications sent by the hiring agency regarding your application. Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments, based on your adjudication decision. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments if you received the link after the close of the announcement. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments here: https://help.usastaffing.gov/Apply/index.php?title=Reasonable_Accommodations_for_USA_Hire Placement Policy: The posting of this announcement does not obligate management to fill a vacancy or vacancies by promotion. The position may be filled by reassignment, change to lower grade, transfer, appointment, or reinstatement. Management may use any one or any combination of these methods to fill the position. It is the policy of the VA to not deny employment to those that have faced financial hardships or periods of unemployment.
Application Deadline: 2026-05-13