Chief Information Security Officer

Atlanta, Georgia, USA

Centers for Disease Control and Prevention

The Department of Health and Human Services (HHS) is looking for dynamic and energetic leaders to join the Senior Executive Service (SES) a talented team of men and women charged with leading the continuing transformation of our government.

This position is SES, an elite group of senior government leaders who possess a diverse portfolio of experience and expertise required to lead across organizations. This cadre of dedicated executives is charged with providing strategic leadership and upholding a commitment to public service that transcends loyalty to a specific agency mission or individual profession.

As an SES member, you will influence the direction of innovation and transformation of the federal government and lead the next generation of public servants. As part of the SES at HHS, you will be among a group of highly skilled executives, contributing to one of the most important missions in the federal government. So, don't just make a career movemake a difference The Department of Health and Human Services Senior Executive Service Leaders who touch lives.

This position is located in Department of Health and Human Services (DHHS), Centers for Disease Control and Prevention (CDC), Office of the Director, Office of the Chief Operating Officer (OCOO), Office of the Chief Information Officer (OCIO), Atlanta, Georgia. CDC is an Equal Opportunity Employer.

**DUTIES**

CDC is the nation's health protection agency, working to keep America healthy, safe, and secure. As a global leader in public health, CDC works to respond, contain, and eliminate disease. Whether we are protecting the American people from health threats, investigating emerging diseases, or mobilizing public health programs with our domestic and international partners, we rely on our employees to make a real difference in protecting the health and safety of people here and around the world.

**RESPONSIBILITIES**

As Chief Information Security Officer, you will: Serve as a senior advisor and program administrator to the CDC Chief Information Officer; Develop, implement, and monitor a strategic, comprehensive cybersecurity program with organizational units; Implement and maintain CDC's cybersecurity program to ensure that information assets and associated technology, applications, systems, infrastructure, and processes are adequately protected in the digital ecosystem; Lead the development, planning, and coordination of the information security and privacy operations related to cybersecurity and privacy programs; Facilitate information security risk assessment and risk management processes with organizational units; Identify and evaluate the legal and regulatory requirements for information technology and cybersecurity risk to information assets while supporting and advancing the mission and business objectives; Implement practices that meet policies and standards for information security and privacy with business units and partners; Facilitate an information security governance structure through the implementation and oversight of an appropriate governance program; Develop and enhance an up-to-date information security management framework using standards and policies; Manage and contain information security incidents and events to protect corporate information technology (IT) assets, intellectual property, and regulated data; Represent and serve as spokesperson for the Chief Information Officer in establishing and maintaining relationships and partnerships with constituents including DHHS, congressional officials, other federal agencies, and representatives of business and industry. Provide supervision and direction to employees and staff.

**QUALIFICATIONS**

**Basic Qualifications Requirements**

All competitive candidates for SES positions with the federal government must demonstrate leadership experience indicative of senior executive level management capability. This executive experience includes serving in a managerial capacity to a large and diverse organization with responsibility for promoting economy, efficiency, and effectiveness in the administration of programs and operations.

To meet the qualification requirements for this position, you must show in your resume that you possess the six Fundamental Competencies, the five Executive Core Qualifications (ECQs), and the Professional/Technical Qualifications (PTQs) listed below. Your resume should emphasize levels of responsibility, scope, and complexity of programs managed, program accomplishments, and results.

**SPECIALIZED EXPERIENCE REQUIREMENT**

You must have one year of specialized experience directly related to the position that has equipped you with the particular knowledge, skills, and abilities to successfully perform the duties of the position to include senior-level managerial and leadership experience in coordinating the functions of subordinate managers and specialized staff with implementing and maintaining a cybersecurity program to ensure information and systems are protected in the digital environment.

**FUNDAMENTAL COMPETENCIES**

Interpersonal Skills, Oral Communication, Integrity/Honesty, Written Communication, Continual Learning, and Public Service Motivation.

**EXECUTIVE CORE QUALIFICATIONS (ECQs)**

1. Leading Change: The ability to bring about strategic change, both within and outside the organization, to meet organizational goals. Inherent to this ECQ is the ability to establish an organizational vision and to implement it in a continuously changing environment.

2. Leading People: The ability to lead people toward meeting the organization's vision, mission, and goals. Inherent to this ECQ is the ability to provide an inclusive workplace that fosters the development of others, facilitates cooperation and teamwork, and supports constructive resolution of conflicts.

3. Results Driven: The ability to meet organizational goals and customer expectations. Inherent to this ECQ is the ability to make decisions that produce high-quality results by applying technical knowledge, analyzing problems, and calculating risks.

4. Business Acumen: The ability to manage human, financial, and information resources strategically.

5. Building Coalitions: The ability to build coalitions internally and with other federal agencies, state and local governments, nonprofit and private sector organizations, foreign governments, or international organizations to achieve common goals.

**PROFESSIONAL/TECHNICAL QUALIFICATIONS (PTQs)**

This position also requires that you have PTQs that represent knowledge, skills, and abilities essential for success in this role. The following PTQs must be evident in your resume.

1. Senior-level leadership and management experience with leading a comprehensive cybersecurity program and risk management activities.

2. Knowledge of legal and regulatory authorities associated with the oversight and management for information technology (IT) and cybersecurity risk.

3. Senior-level experience facilitating a cybersecurity governance structure through the implementation and oversight of an appropriate governance program.

4. Senior-level experience implementing and monitoring cybersecurity management frameworks and privacy program for an organizational network.

5. Ability to build and maintain effective working relationships and partnerships with individuals and organizations to convey information to support and defend the organization's cybersecurity program to senior-level officials, Congress, federal, state, and non-federal agencies.

It is strongly recommended that you visit the Office of Personnel Management (OPM) webpage for more information regarding the Fundamental Competencies and ECQs. You can find additional information on the proper preparation of ECQs on OPM's website. You are encouraged to follow the Challenge, Context, Action, and Result model outlined in the guide.

If selected, you will be require