Chief Information Security Officer

This position is located in the Drug Enforcement Administration (DEA), Information System Division (TC) in Arlington, Virginia. The purpose of this position is to advise the Chief Information Officer (CIO) on the security oversight for all DEA information technology (IT) systems. The incumbent will direct cybersecurity policies, risk management, security engineering, incident response, and supply chain security programs for the DEA IT Enterprise.

Qualifications: Qualifications include both general management skills and characteristics that are applicable to all Senior Level positions and technical or program responsibilities specific to this position. Applicants must have substantive general experience which provides a good basic or general knowledge of the principles of organization, management, and administration; and substantive specialized (operating administrative or managerial) experience in a type of work or a combination of functions directly related to this position. Applicants must meet the qualification requirements by the closing date of this announcement. Eligibility for this position will be based upon a clear showing that the applicant has experience of the scope and quality sufficient to effectively carry out assignments of the position. Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race, sex, color, religion, or national origin.To meet the minimum qualification requirements for this position, you must show that you possess the Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit will be disqualified. Please see "Required Documents" section below for all resume formatting requirements. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position. TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications: MTQ 1: Demonstrated experience with risk management principles and methodologies, including the ability to identify, assess, and prioritize risks for Super Intelligence (SI), legacy systems, emerging technologies, complex datasets, and cloud solutions as well as a thorough understanding of federal compliance requirements (e.g. FISMA, NIST), ensuing compliance with these requirements, and securing complex data in various environments. MTQ 2: Expertly expresses complex information (e.g. ideas or facts) on cybersecurity, risk, compliance, secure SI implementation, and/or data-related concepts considering the audience and nature of the information. Demonstrated skill in presenting cybersecurity topics to an executive audience in order to promote a culture of security awareness, effectively report on compliance with requirements, and utilizes data to drive metrics-based decisions. MTQ 3: Demonstrates an ability to drive technical innovation in a secure, compliant, and data-driven manner to support the overall goal of modernizing DEA's IT enterprise. Experience securely integrating new technologies, processes, complex data sets, SI and cloud solutions into an organization while efficiently assessing risk, compliance, and data security. Possesses a comprehensive understanding of IT security concepts, theories, practices, and standards. Serves as a foremost authority in security architectural planning and provides senior level guidance to agency leadership.