Jobs › IT CYBERSECURITY SPECIALIST (INFOSEC)
IT CYBERSECURITY SPECIALIST (INFOSEC)
Job at a glance
- Category
- GRC
- Work arrangement
- On-site
- Location
- Multiple Locations
- Salary range
- $57,331 to $101,375
- Posted
- Nov 13, 2026
- Closes
- November 17, 2026, at 11:59 p.m. Eastern Time
Free. One click to unsubscribe. We never share your address.
Defense Finance and Accounting Service is hiring a IT CYBERSECURITY SPECIALIST (INFOSEC) in Multiple Locations. This is a GRC job in the governance, risk, and compliance field, with a posted range of $57,331 to $101,375. Review the full details below and apply directly with Defense Finance and Accounting Service.
Who may apply: All US Citizens Applicants for Cleveland positions may be placed at Bratenahl. We may use this announcement to fill other positions in the Information & Technology Directorate. This job announcement uses the USA Hire Assessment to evaluate applicants. For more information, visit USA Hire Assessment.
Qualifications: **This Job Opportunity Announcement is using an additional online assessment tool to evaluate applicants. Please review the HOW YOU WILL BE EVALUATED, REQUIRED DOCUMENTS, HOW TO APPLY and NEXT STEPS sections below for instructions. This position is being filled under the Direct Hire Authority for Certain Personnel of the Department of Defense via delegated authority by the Office of the Secretary of Defense. Basic Requirement: Applicants must have IT-related experience demonstrating the following competencies appropriate to, or above, the level of this position. Your resume and work experience should clearly support your ability to meet these competencies and will be evaluated as part of the entire application process. Attention to Detail- experience reviewing my own information technology-related work or data to ensure accuracy, completeness, and consistency with standards. My work or the data that I produce is typically reviewed by my supervisor or another colleague Customer Service- experience having brief contact with customers to provide information about available information technology products and services and providing customers with standard products or routine services to address information technology needs Oral Communication- experience informing my supervisor and other IT staff of the status of information technology systems, projects, or daily operations, including the status of information technology systems, projects, or daily operations, including the communication of basic technical information to a non-technical audience Problem Solving- identifying or selecting from a number of alternatives to address routine information technology-related issues by gathering and applying information from standard sources that provide a limited number of solutions IN ADDITION TO THE BASIC REQUIREMENTS LISTED ABOVE: For Entry at the GS-07 Level: One year of specialized experience equivalent in level of difficulty and responsibility to that of the next lower grade n the federal service (GS-05), which demonstrates the ability to perform the duties of the position, is required. Specialized experience is defined as: Applying information assurance policy and procedures to automated information systems; assisting with information systems security testing within automated information systems. For Entry at the GS-09 Level: One year of specialized experience equivalent in level of difficulty and responsibility to that of the next lower grade n the federal service (GS-07), which demonstrates the ability to perform the duties of the position, is required. Specialized experience is defined as: Assisting in planning and developing information security policy and procedures for automated information systems; assisting in implementing technical information assurance and security controls within automated information systems; performing systems security testing within automated information systems. For Entry at the GS-11 Level: One year of specialized experience equivalent in level of difficulty and responsibility to that of the next lower grade n the federal service (GS-09), which demonstrates the ability to perform the duties of the position, is required. Specialized experience is defined as: Conducting information systems security evaluations, audits, and reviews to identify vulnerabilities, risks and protection needs of information systems; developing security specifications, technical controls and testing plans for automated information systems; reviewing audit results and implementing recommendations relating to security and information assurance policy and procedures. GS-07, GS-09, GS-11 entry grade levels. Once eligibility and qualification requirements are met, selectees will be eligible for promotion at management discretion to the GS-09 or GS-11 grade levels without further competition. Volunteer Experience: Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates to paid employment. You will receive credit for all qualifying experience, including volunteer experience. You may qualify for consideration if meeting time-in grade, specialized experience, education requirement, 90 days after competitive appointment requirement, and all other qualification requirements within 30 calendar days after the closing date of the announcement, unless otherwise indicated on the announcement.
Full responsibilities and requirements are on Defense Finance and Accounting Service's application page.
Apply for this job →Location and market context
This job is based in Multiple Locations on-site. Local candidates benefit from being close to Defense Finance and Accounting Service's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.
About cybersecurity governance jobs
Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.
How to position yourself for this cybersecurity governance job
Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Defense Finance and Accounting Service would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
More GRC jobs: All GRC jobs · Search by category & location