Jobs › IT Cybersecurity Specialist (InfoSec)
IT Cybersecurity Specialist (InfoSec)
Job at a glance
- Category
- GRC
- Work arrangement
- On-site
- Location
- Multiple Locations
- Salary range
- $52,727 to $82,938
- Posted
- Nov 2, 2026
Free. One click to unsubscribe. We never share your address.
Social Security Administration is hiring a IT Cybersecurity Specialist (InfoSec) in Multiple Locations. This is a GRC job in the governance, risk, and compliance field, with a posted range of $52,727 to $82,938. Review the full details below and apply directly with Social Security Administration.
See QUALIFICATIONS for information about this position. Supports the day-to-day functionality and protection of Social Security Administration information technology systems by developing and implementing cybersecurity programs, policies, procedures and digital tools. See DUTIES for responsibilities.
Qualifications: To meet Minimum Qualifications for this IT Cybersecurity Specialist position you must demonstrate (1) the IT Competencies for the federal 2210 series AND (2) Specialized Experience (or optional education). Your resume must describe your IT-related experience to demonstrate these qualifications. Consideration will be given to paid or unpaid work, as well as relevant assignments or tasks completed as part of your education or training. Your resume must clearly describe the duties you perform(ed) that provide experience in these areas.. IT Competencies relevant to this position: .Attention to Detail: Is thorough when performing work and conscientious about attending to detail. Customer Service: Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Decision Making: Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change. Information Management: Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems. Interpersonal Skills: Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations. Oral Communication: Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving: Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Teamwork: Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals. Technical Competence: Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues. *********************************************** SPECIALIZED EXPERIENCE for GS-09 must have been gained in a federal position at or above GS-07 OR (if your experience is on another federal pay scale OR outside of federal service) by performing duties at a level of responsibility and difficulty equivalent to GS-07. Credit will be given for relevant work or assignments / tasks performed as part of your education or training. Your resume must clearly identify the duties and responsibilities for each position held. Specialized Experience is work that involves following established procedures to support the planning, development, implementation of and/or maintenance of information security programs or policies. If you have this experience, your resume must describe, in your own words, the specific duties you perform that demonstrate it. Reviewers cannot assume you perform duties you don't describe. Your experience should include: Participating in the development of IT security policies and procedures. Participating with risks assessments and helping develop disaster recovery or contingency plans. Participating with collecting, analyzing, and documenting security-related information and recommendations Participating with explaining technical security information and recommendations to different audiences. In lieu of specialized experience, you can meet requirements with a master's degree or at least 2 full academic years of progressively higher graduate-level education leading to a master's (or equivalent) degree. (See EDUCATION) *********************************************** SPECIALIZED EXPERIENCE for GS-11 must have been gained in a federal position at or above GS-09 OR (if your experience is on another federal pay scale OR outside of federal service) by performing duties at a level of responsibility and difficulty equivalent to GS-09. Credit will be given for relevant unpaid and/or part-time work. Your resume must clearly identify the duties and responsibilities for each position held. Specialized Experience is work that involves assisting with supporting the planning, development, implementation of and/or maintenance of information security programs or policies. If you have this experience, your resume must describe, in your own words, the specific duties you perform that demonstrate it. Reviewers cannot assume you perform duties you don't describe. Your experience should include: Assisting with the development of IT security policies and procedures. Assisting with risks assessments and helping develop disaster recovery or contingency plans. Assisting with collecting, analyzing, and documenting security-related information and recommendations Assisting with explaining technical security information and recommendations to different audiences. In lieu of specialized experience, you can meet requirements with a Ph.D
Full responsibilities and requirements are on Social Security Administration's application page.
Apply for this job →Location and market context
This job is based in Multiple Locations on-site. Local candidates benefit from being close to Social Security Administration's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.
About cybersecurity governance jobs
Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.
How to position yourself for this cybersecurity governance job
Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Social Security Administration would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
More GRC jobs: All GRC jobs · Search by category & location