Supervisory IT Cybersecurity Specialist-Direct Hire

The Chief Information Security Officer (CISO) will work in the Office of Science and Technology (OST), Office of Cybersecurity. This position supports enterprise IT capabilities that enable ATF's regulatory, criminal enforcement, and administrative missions. Direct-Hire Authority (DHA) is a hiring authority granted by the Office of Personnel Management (OPM) to address critical hiring needs or severe candidate shortages

Qualifications: To qualify for the Supervisory IT Cybersecurity Specialist position at the GS-15 grade level, candidates must meet the following specialized experience by the closing date of this announcement. Specialized experience is demonstrated experience, which has equipped the applicant with the particular knowledge, skills and abilities to perform successfully the duties of this position. Experience must be in the normal line of progression or must be related to the work of the position advertised and must be reflected in resume. EXPERIENCE: Candidates must have at least one year of specialized experience equivalent to the next lower grade level (GS-14) (obtained in either the public or private sectors). This experience must include all of the following: Serving as a technical authority in cybersecurity theories, principles, concepts, standards, methods, and practices; AND Managing enterprise-level security programs involving Federal information security law and policy, Office of Management and Budget (OMB) requirements, National Institute of Standards and Technology (NIST) guidance, the Federal Information Security Modernization (FISMA) Act, security control assessment, authorization decision support, continuous monitoring strategy, vulnerability remediation, and coordinated incident response; AND Implementing and maintaining cybersecurity resilience for enterprise systems and technology services to ensure compliance with applicable Federal information security requirements; AND Directing agency cybersecurity risk-management activities, including execution of the Risk Management Framework (RMF), authorization processes, security control assessments, continuous monitoring, vulnerability management, and development and tracking of Plans of Action and Milestones (POA&M); AND Integrating cybersecurity requirements into enterprise architecture, technology investments, acquisition processes, business workflows, and law-enforcement mission operations. Your resume must support your responses to the application questionnaire and the qualification requirements. Failure to do so may result in an ineligible rating. See the Required Documents section for important notes about what must be included in your resume. After you submit this application, you will receive an e-mail informing you that a USA Hire assessment is required of you. You will have 48 hours from the closing date of this announcement (11/03/2026) to complete the assessment as this assessment is part of your application.