GRC CareersAGJ, the AI governance job boardPost a Job

Jobs › IT Cybersecurity Specialist (InfoSec)

IT Cybersecurity Specialist (InfoSec)

Social Security Administration

Job at a glance

Category
GRC
Work arrangement
On-site
Location
Multiple Locations
Salary range
$52,727 to $82,938
Posted
Nov 2, 2026
Apply for this jobApplications go directly to Social Security Administration
Applying today? Most GRC roles fill fast. Get the next ones the day they post, in Multiple Locations.

Free. One click to unsubscribe. We never share your address.

ShareEmailLinkedInXFacebookPrint / Save PDFCopy link

Social Security Administration is hiring a IT Cybersecurity Specialist (InfoSec) in Multiple Locations. This is a GRC job in the governance, risk, and compliance field, with a posted range of $52,727 to $82,938. Review the full details below and apply directly with Social Security Administration.

See QUALIFICATIONS for information about this position. Supports the day-to-day functionality and protection of Social Security Administration information technology systems by developing and implementing cybersecurity programs, policies, procedures and digital tools. See DUTIES for responsibilities.

Qualifications: To meet Minimum Qualifications for this IT Cybersecurity Specialist position you must demonstrate (1) the IT Competencies for the federal 2210 series AND (2) Specialized Experience (or optional education). Your resume must describe your IT-related experience to demonstrate these qualifications. Consideration will be given to paid or unpaid work, as well as relevant assignments or tasks completed as part of your education or training. Your resume must clearly describe the duties you perform(ed) that provide experience in these areas.. IT Competencies relevant to this position: .Attention to Detail: Is thorough when performing work and conscientious about attending to detail. Customer Service: Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Decision Making: Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change. Information Management: Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems. Interpersonal Skills: Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations. Oral Communication: Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving: Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Teamwork: Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals. Technical Competence: Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues. *********************************************** SPECIALIZED EXPERIENCE for GS-09 must have been gained in a federal position at or above GS-07 OR (if your experience is on another federal pay scale OR outside of federal service) by performing duties at a level of responsibility and difficulty equivalent to GS-07. Credit will be given for relevant work or assignments / tasks performed as part of your education or training. Your resume must clearly identify the duties and responsibilities for each position held. Specialized Experience is work that involves following established procedures to support the planning, development, implementation of and/or maintenance of information security programs or policies. If you have this experience, your resume must describe, in your own words, the specific duties you perform that demonstrate it. Reviewers cannot assume you perform duties you don't describe. Your experience should include: Participating in the development of IT security policies and procedures. Participating with risks assessments and helping develop disaster recovery or contingency plans. Participating with collecting, analyzing, and documenting security-related information and recommendations Participating with explaining technical security information and recommendations to different audiences. In lieu of specialized experience, you can meet requirements with a master's degree or at least 2 full academic years of progressively higher graduate-level education leading to a master's (or equivalent) degree. (See EDUCATION) *********************************************** SPECIALIZED EXPERIENCE for GS-11 must have been gained in a federal position at or above GS-09 OR (if your experience is on another federal pay scale OR outside of federal service) by performing duties at a level of responsibility and difficulty equivalent to GS-09. Credit will be given for relevant unpaid and/or part-time work. Your resume must clearly identify the duties and responsibilities for each position held. Specialized Experience is work that involves assisting with supporting the planning, development, implementation of and/or maintenance of information security programs or policies. If you have this experience, your resume must describe, in your own words, the specific duties you perform that demonstrate it. Reviewers cannot assume you perform duties you don't describe. Your experience should include: Assisting with the development of IT security policies and procedures. Assisting with risks assessments and helping develop disaster recovery or contingency plans. Assisting with collecting, analyzing, and documenting security-related information and recommendations Assisting with explaining technical security information and recommendations to different audiences. In lieu of specialized experience, you can meet requirements with a Ph.D

Full responsibilities and requirements are on Social Security Administration's application page.

Apply for this job →
About Social Security Administration
Hiring for governance, risk, and compliance jobs on GRC Careers.
Search all Social Security Administration jobs →

Location and market context

This job is based in Multiple Locations on-site. Local candidates benefit from being close to Social Security Administration's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Social Security Administration would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

Cybersecurity Compliance Office Lead (O-6 Billet) Supervisory
Immigration and Customs Enforcement
Location Negotiable After Selection$150k
IT CYBERSECURITY SPECIALIST (APPSW)
Defense Finance and Accounting Service
Multiple Locations$90k to $117k
IT Cybersecurity Specialist (Recent Graduates)
Social Security Administration
Multiple Locations$43k to $69k
Senior Adviser - Cyber and Emerging Technologies Unit
Securities and Exchange Commission
Multiple Locations$168k to $292k
Cybersecurity Defensive Operations - Leadership
Cybersecurity and Infrastructure Security Agency
Multiple Locations$124k to $208k
IT Cybersecurity Specialist (SYSANLYSIS/INFOSEC)
Defense Information Systems Agency
Pentagon, Arlington$144k to $187k
Get more jobs like this by email
We will email you new GRC jobs in Multiple Locations as they post. Free and confidential, one click to unsubscribe.

Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

More GRC jobs: All GRC jobs · Search by category & location

Need help applying for this job?

Most people send the same résumé to forty roles and hear nothing. These three do something about that.

Free
Career Intelligence tools
Five AI tools: rank your matches, see what the role really demands, find the recruiter behind the posting, build an interview-ready company brief, and know your number before they ask.
Use the free tools →
$75
Résumé review by a GRC professional
A working GRC professional reads it line by line: what clears the ATS, what a hiring manager actually looks for, and which of your experience you are underselling.
Book a résumé review →
$75/hr
Coaching through your search
Someone who has run executive searches for 28 years, working your actual search with you: targeting, positioning, interviews and negotiation.
Book a coaching session →

Free tools need no account. Paid services are delivered by a person, not a template.