GRC CareersAGJ, the AI governance job boardPost a Job

Jobs › Information Security Specialist (SSO)

Information Security Specialist (SSO)

Centers for Disease Control and Prevention

Job at a glance

Category
GRC
Work arrangement
On-site
Location
Atlanta, Georgia
Salary range
$112,556 to $146,325
Posted
Nov 3, 2026
Apply for this jobApplications go directly to Centers for Disease Control and Prevention
Applying today? Most GRC roles fill fast. Get the next ones the day they post, in Atlanta, Georgia.

Free. One click to unsubscribe. We never share your address.

ShareEmailLinkedInXFacebookPrint / Save PDFCopy link

Centers for Disease Control and Prevention is hiring a Information Security Specialist (SSO) in Atlanta, Georgia. This is a GRC job in the governance, risk, and compliance field, with a posted range of $112,556 to $146,325. Review the full details below and apply directly with Centers for Disease Control and Prevention.

This position is located in the Department of Health and Human Services, Office of Safety, Security, and Asset Management, headquartered in Atlanta, Georgia. This announcement will close at 11:59 PM, on the day that 50 applications have been received or the closing date of the announcement, whichever comes first.

Qualifications: WHAT WE ARE LOOKING FOR Minimum Qualifications: You must have one-year specialized experience to perform successfully the duties of the position. To be creditable, specialized experience must have been equivalent to at least the GS-12 grade level in the Federal service performing ALL of the following: Administering national security information programs involving Sensitive Compartmented Information (SCI) and derivative classification, while managing SCIFs and collateral classified spaces to maintain full accreditation and compliance with national-level security requirements. Directing secure communications and classified network administration, developing and implementing policies and procedures governing classified communications systems in accordance with Executive Orders, Intelligence Community Directives (ICDs), and other applicable national security authorities. Interpreting broad policy directives and executive-level guidance, translating requirements into actionable agency-level security strategies, policies, and procedures that strengthen compliance and support effective implementation of national security programs. Documenting experience: IN DESCRIBING YOUR EXPERIENCE, PLEASE BE CLEAR AND SPECIFIC. WE WILL NOT MAKE ASSUMPTIONS REGARDING YOUR EXPERIENCE. Qualifications are based on breadth/level of experience. In addition to describing duties performed, applicants must provide the exact dates of each period of employment (from MM/YY to MM/YY) and the number of hours worked per week if part time. As qualification determinations cannot be made when resumes do not include the required information, failure to provide this information may result in disqualification. Applicants are encouraged to use the USAJOBS Resume Builder to develop their federal resume. Do not copy and paste the duties, specialized experience, or occupational application questionnaire from this announcement into your resume as that will not be considered a demonstration of your qualifications for this position. In accordance with Office of Personnel Management policy, federal employees are assumed to have gained experience by performing duties and responsibilities appropriate for their official series and grade level as described in their position description. Experience that would not normally be part of the employee's position is creditable, however, when documented by satisfactory evidence, such as a signed memorandum from the employee's supervisor or an SF-50 or SF-52 documenting an official detail or other official assignment. The documentation must indicate whether the duties were performed full time or, if part time, the "percentage of times" the other duties were performed. It is expected that this documentation is included in the employee's official personnel record. In order to receive credit for experience in your resume that is not within the official series and grade level of your official position, you must provide a copy of the appropriate documentation of such experience as indicated above. Experience refers to paid and unpaid experience, including volunteer work done through national Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to gain employment. You will receive credit for all qualifying experience, including volunteer experience. If such experience is on a part-time basis, you must provide the average number of hours worked per week as well as the beginning and ending dates of the experience so it can be fully credited. OPM Qualification General Policies Website

Full responsibilities and requirements are on Centers for Disease Control and Prevention's application page.

Apply for this job →
About Centers for Disease Control and Prevention
Hiring for governance, risk, and compliance jobs on GRC Careers.
Search all Centers for Disease Control and Prevention jobs →

Location and market context

This job is based in Atlanta, Georgia on-site. Local candidates benefit from being close to Centers for Disease Control and Prevention's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Centers for Disease Control and Prevention would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

IT Cybersecurity Specialist
Small Business Administration
Washington, District of Columbia$144k to $177k
Physical & Information Security Specialist
Offices, Boards and Divisions
Washington, District of Columbia$71k to $111k
IT Cybersecurity Specialist (CYBERMGT)
Department of Energy Headquarters
Washington, District of Columbia$169k to $197k
IT CYBERSECURITY SPECIALIST (SYSANALYSIS/NETWORK)
Air Combat Command
Langley AFB, Virginia$76k to $99k
Information Technology Specialist (Policy and Planning/Information Security)
Military Treatment Facilities under DHA
Columbus AFB, Mississippi$106k to $138k
Information Technology Specialist (Information Security)
Animal and Plant Health Inspection Service
Multiple Locations$126k to $164k
Get more jobs like this by email
We will email you new GRC jobs in Atlanta, Georgia as they post. Free and confidential, one click to unsubscribe.

Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

More GRC jobs: All GRC jobs · Search by category & location

Need help applying for this job?

Most people send the same résumé to forty roles and hear nothing. These three do something about that.

Free
Career Intelligence tools
Five AI tools: rank your matches, see what the role really demands, find the recruiter behind the posting, build an interview-ready company brief, and know your number before they ask.
Use the free tools →
$75
Résumé review by a GRC professional
A working GRC professional reads it line by line: what clears the ATS, what a hiring manager actually looks for, and which of your experience you are underselling.
Book a résumé review →
$75/hr
Coaching through your search
Someone who has run executive searches for 28 years, working your actual search with you: targeting, positioning, interviews and negotiation.
Book a coaching session →

Free tools need no account. Paid services are delivered by a person, not a template.