GRC CareersAGJ, the AI governance job boardPost a Job

Jobs › IT Cybersecurity Specialist

IT Cybersecurity Specialist

Small Business Administration

Job at a glance

Category
GRC
Work arrangement
On-site
Location
Washington, District of Columbia
Salary range
$143,913 to $177,497
Posted
Nov 3, 2026
Apply for this jobApplications go directly to Small Business Administration
Applying today? Most GRC roles fill fast. Get the next ones the day they post, in Washington, District of Columbia.

Free. One click to unsubscribe. We never share your address.

ShareEmailLinkedInXFacebookPrint / Save PDFCopy link

Small Business Administration is hiring a IT Cybersecurity Specialist in Washington, District of Columbia. This is a GRC job in the governance, risk, and compliance field, with a posted range of $143,913 to $177,497. Review the full details below and apply directly with Small Business Administration.

This position is located in the Small Business Administration, Office of the Chief Information Officer in Washington, DC. The incumbent serves as an Information Technology (IT) Cybersecurity Specialist for the U.S. Small Business Administration (SBA). This vacancy is open to CTAP and ICTAP eligible candidates only. If you are not eligible for one of these you will be made ineligible for consideration for this position.

Qualifications: GS-14: You must demonstrate the competencies required to successfully perform the duties of the position. These competencies are normally attained through one year of specialized experience equivalent to the next lower grade level of the position being filled but may be obtained through other means. Experience may be paid or unpaid (internships, volunteerism). Experience must be validated through the assessment process, consistent with OPM's skills-based hiring policy. Qualifying specialized experience includes: - Leading risk and vulnerability assessments, such as directing comprehensive risk assessments and vulnerability analyses of enterprise systems, networks, and software to identify systemic weaknesses and inform mitigation strategies. - Building cybersecurity architecture, such as developing long-range system security strategies to ensure confidentiality, integrity, and availability of enterprise systems. - Evaluating cybersecurity programs, such as assessing enterprise cybersecurity programs to identify gaps, ensure compliance with organizational requirements, and recommend improvements to enhance overall program effectiveness. Specialized experience must show demonstrable competencies aligned to the position's job analysis and the IT-2210 standard. These qualifications must be clearly referenced in your resume. Additional information on the qualification requirements is outlined in the OPM Qualifications Standards Handbook of General Schedule Positions. It is available for your review on OPM's Qualifications web site: Information Technology Management Series, 2210 Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g. Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Generally, time in Non-Pay status as a federal employee is not creditable towards the specialized experience requirement listed above. All qualification requirements must be met by 11:59 pm (Eastern Time) on 11/11/2026.

Full responsibilities and requirements are on Small Business Administration's application page.

Apply for this job →
About Small Business Administration
Hiring for governance, risk, and compliance jobs on GRC Careers.
Search all Small Business Administration jobs →

Location and market context

This job is based in Washington, District of Columbia on-site. Local candidates benefit from being close to Small Business Administration's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Small Business Administration would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

Physical & Information Security Specialist
Offices, Boards and Divisions
Washington, District of Columbia$71k to $111k
Cybersecurity Compliance Office Lead (O-6 Billet) Supervisory
Immigration and Customs Enforcement
Location Negotiable After Selection$150k
IT Cybersecurity Specialist (InfoSec)
Social Security Administration
Multiple Locations$53k to $83k
IT CYBERSECURITY SPECIALIST (APPSW)
Defense Finance and Accounting Service
Multiple Locations$90k to $117k
IT Cybersecurity Specialist (Recent Graduates)
Social Security Administration
Multiple Locations$43k to $69k
Senior Adviser - Cyber and Emerging Technologies Unit
Securities and Exchange Commission
Multiple Locations$168k to $292k
Get more jobs like this by email
We will email you new GRC jobs in Washington, District of Columbia as they post. Free and confidential, one click to unsubscribe.

Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

More GRC jobs: All GRC jobs · Search by category & location

Need help applying for this job?

Most people send the same résumé to forty roles and hear nothing. These three do something about that.

Free
Career Intelligence tools
Five AI tools: rank your matches, see what the role really demands, find the recruiter behind the posting, build an interview-ready company brief, and know your number before they ask.
Use the free tools →
$75
Résumé review by a GRC professional
A working GRC professional reads it line by line: what clears the ATS, what a hiring manager actually looks for, and which of your experience you are underselling.
Book a résumé review →
$75/hr
Coaching through your search
Someone who has run executive searches for 28 years, working your actual search with you: targeting, positioning, interviews and negotiation.
Book a coaching session →

Free tools need no account. Paid services are delivered by a person, not a template.