Jobs › IT Cybersecurity Specialist
IT Cybersecurity Specialist
Job at a glance
- Category
- GRC
- Work arrangement
- On-site
- Location
- Washington, District of Columbia
- Salary range
- $143,913 to $177,497
- Posted
- Nov 3, 2026
Free. One click to unsubscribe. We never share your address.
Small Business Administration is hiring a IT Cybersecurity Specialist in Washington, District of Columbia. This is a GRC job in the governance, risk, and compliance field, with a posted range of $143,913 to $177,497. Review the full details below and apply directly with Small Business Administration.
This position is located in the Small Business Administration, Office of the Chief Information Officer in Washington, DC. The incumbent serves as an Information Technology (IT) Cybersecurity Specialist for the U.S. Small Business Administration (SBA). This vacancy is open to CTAP and ICTAP eligible candidates only. If you are not eligible for one of these you will be made ineligible for consideration for this position.
Qualifications: GS-14: You must demonstrate the competencies required to successfully perform the duties of the position. These competencies are normally attained through one year of specialized experience equivalent to the next lower grade level of the position being filled but may be obtained through other means. Experience may be paid or unpaid (internships, volunteerism). Experience must be validated through the assessment process, consistent with OPM's skills-based hiring policy. Qualifying specialized experience includes: - Leading risk and vulnerability assessments, such as directing comprehensive risk assessments and vulnerability analyses of enterprise systems, networks, and software to identify systemic weaknesses and inform mitigation strategies. - Building cybersecurity architecture, such as developing long-range system security strategies to ensure confidentiality, integrity, and availability of enterprise systems. - Evaluating cybersecurity programs, such as assessing enterprise cybersecurity programs to identify gaps, ensure compliance with organizational requirements, and recommend improvements to enhance overall program effectiveness. Specialized experience must show demonstrable competencies aligned to the position's job analysis and the IT-2210 standard. These qualifications must be clearly referenced in your resume. Additional information on the qualification requirements is outlined in the OPM Qualifications Standards Handbook of General Schedule Positions. It is available for your review on OPM's Qualifications web site: Information Technology Management Series, 2210 Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g. Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Generally, time in Non-Pay status as a federal employee is not creditable towards the specialized experience requirement listed above. All qualification requirements must be met by 11:59 pm (Eastern Time) on 11/11/2026.
Full responsibilities and requirements are on Small Business Administration's application page.
Apply for this job →Location and market context
This job is based in Washington, District of Columbia on-site. Local candidates benefit from being close to Small Business Administration's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.
About cybersecurity governance jobs
Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.
How to position yourself for this cybersecurity governance job
Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Small Business Administration would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
More GRC jobs: All GRC jobs · Search by category & location