GRC Careers: Governance, Risk and Compliance JobsGovernance · Risk · Compliance Careers

Jobs › Maryland › Washington, DC › IT CyberSecurity Specialist (Data Security)

IT CyberSecurity Specialist (Data Security)

Office of Administration
CybersecurityOn-siteFull-timeWashington, District of Columbia$102415 - $133142 Per Year

Office of Administration is hiring for the job of IT CyberSecurity Specialist (Data Security), Washington, District of Columbia (On-site). This is a Cybersecurity job in the governance, risk, and compliance field, with a posted range of $102415 - $133142 Per Year. Review the full details below and apply directly with Office of Administration.

Organization: Office of AdministrationLocation: Washington, District of ColumbiaWorkplace: On-siteFocus: CybersecuritySalary: $102415 - $133142 Per YearPosted: Oct 14, 2026
Office of Administration is hiring for this Cybersecurity job in Washington, one of the metros GRC Careers tracks for governance, risk, and compliance hiring. See other GRC jobs in Washington →

The incumbent serves as OAIT's Senior Data Security Analyst responsible for ensuring the security of information systems through implementation and assessment of risk-based cybersecurity controls, in compliance with EOP requirements, Federal regulations, industry best practices, and requirements set forth by organizational entities.

Qualifications: MINIMUM QUALIFICATION REQUIREMENTS All applicants must meet the qualification requirements outlined below to be considered minimally qualified for this position. The qualification requirements are in accordance with the OPM Qualification Standards. ALL QUALIFICATIONS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT. BASIC REQUIREMENTS: Applicants must meet one of the following criteria listed below in order to meet the basic requirement for the IT CyberSecurity Specialist position, 2210. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. -AND- SPECIALIZED EXPERIENCE: In addition to the Basic Requirements above, applicants must have a minimum of one year of specialized experience at a level of difficulty and responsibility comparable to the next lower grade or comparable pay band in the Federal service or equivalent experience in the private sector. You may qualify at the GS-12 level, if you fulfill the following qualification requirement: One full year of specialized experience equivalent to the GS-11 grade level in the Federal service or equivalent experience in the private sector which demonstrates all of the following: 1) Implementing and maintaining technical system security controls, such as logging and monitoring, vulnerability scanning, configuration management, and access control; 2) Communicating threats, vulnerabilities, and risks to technical and non-technical stakeholders; 3) Performing continuous monitoring of information systems through review of open source vulnerability information, vulnerability scanning, and ongoing system assessments; 4) Performing system security assessments, including experience executing assessments as part of system authorization to operate processes; and 5) Maintaining compliance with internal policies and procedures and applicable laws, regulations, and standards in securing information systems. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Location and market context

This job is based in Washington on-site. Local candidates benefit from being close to Office of Administration's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Office of Administration would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

More GRC jobs in Washington

Hiring for Cybersecurity?

Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.

Post a job  Pricing from $99 · About GRC Careers · Hiring toolkit

Want to be next in a job like this?

Jobs like IT CyberSecurity Specialist (Data Security) in Washington, District of Columbia open regularly. Be first to know, privately. No current employer ever sees you looking.

New Cybersecurity jobs, the moment they post.

One click unsubscribe.
Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

Employer, or see something wrong with this posting? Report this posting and we will review it promptly.