You are viewing a preview of this job. Log in or register to view more details about this job.

IT Cybersecurity Specialist (Policy Plan/Info Security)

Naval Civilian Careers
Email

IT Cybersecurity Specialist (Policy Plan/Info Security)

Salary: $143913.00 - $187093.00 Per Year

Overview



  • Location: WASHINGTON NAVY YARD, DC


  • Telework Eligible: Yes-YA002 Eligible for situational telework only


  • Work Schedule: Full-Time


  • Security Required: Top Secret


  • Open Dates: 2026-10-13 to 2026-10-30

Summary

  • You will serve as an Information System Security Manager (ISSM) a critical role within the ODASN A&HRS, MAHRS Directorate. The ISSM will lead cybersecurity and RMF activities for the MAHRS Directorate, including managing ATO packages, maintaining security documentation, implementing safeguards, and coordinating with key stakeholders. The position also supports incident reporting, cybersecurity risk assessments, and development of RMF-related briefings, training, and implementation plans. 

Requirements



    • Must be a US Citizen.

    • Must be determined suitable for federal employment.

    • Must participate in the direct deposit pay program.

    • New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov

    • Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326.

    • Males born after 12-31-59 must be registered for Selective Service.

    • You will be required to obtain and maintain an interim and/or final security clearance prior to entrance on duty. Failure to obtain and maintain the required level of clearance may result in the withdrawal of a job offer or removal.

    • Successful completion of a pre-employment drug test (including marijuana) is required. A tentative offer of employment will be rescinded if you fail to report to the drug test appointment or fail the test. You will be subject to random testing.

    • This is a Cyberspace Workforce position, work role code Information Systems Security Manager, proficiency level Expert.

    • The incumbent is required to obtain and maintain qualifications in DoDM 8140.03 Cyber Workforce Qualification and Department of Navy policies




Responsibilities and Duties

You will ensure the certification and accreditation of Navy systems and applications in accordance with DOD and DON RMF directives, instructions, and other national level policy documents to achieve Authority to Operate (ATO).
You will process RMF packages using existing Navy planning, analysis, implementation, security programs and policies, and collaboration processes and tools.
You will track, monitor, maintain, and support development of all documentation for Manpower, Analytics, and HR Systems (MAHRS) RMF packages.
You will implement policies and procedures to ensure reliability and accessibility to prevent and defend against unauthorized access to systems, networks, and data.
You will perform detailed analyses of operating system software and firmware to determine necessary cyber security safeguards.
You will maintain liaison among the Navy Information Systems Security Managers (ISSMs), Information Systems Security Officers (ISSOs) and Program Security Officers (PSOs) and all stakeholders to enable smooth processing of the RMF package.
You will develop point papers, briefings and training materials, decision memoranda, oral presentations, and technical, administrative and information papers on RMF issues.
You will investigate, track, and report incidents and spillages for the organization.
You will research new/emerging technologies and engineering solutions for Cybersecurity risks to ensure implementation of appropriate system security policies.
You will develop transition and implementation plans for Cybersecurity and RMF processes.

Qualifications


  • Does your resume demonstrate the following?
    Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
    Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations.
    Oral Communication - Expresses information to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
    Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives.

  • Does your resume demonstrate at least one year of specialized experience at or equivalent to the GS-13 grade level or pay band in the Federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following:

    -Experience of and mastery - level knowledge of cyber security functions, practices, cyber security methodologies and tools, and extensive experience in Risk Management Framework (RMF) processes and doctrine sufficient for effective management of day-to-day operations.

    -Experience assessing the threat, understanding the vulnerability and mitigating strategies, communicating requirements, and providing advice and guidance to users.


Additional Information


  • You will be evaluated for this job based on how well you meet the qualifications above.

    In order to qualify for this position, your resume must provide sufficient experience and/or education, knowledge, skills, and abilities to perform the duties of the specific position for which you are being considered. Resumes are restricted to no more than 2 pages. Illegible/unreadable resumes will not be considered. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience.

    As vacancies occur, the Human Resources Office will review your resume to ensure you meet the hiring eligibility and qualification requirements listed in this flyer. You will be rated based on the information provided in your resume, along with your supporting documentation.

    If selected, you may be required to provide additional supporting documentation.

    If after reviewing your resume and supporting documentation, a determination is made that you inflated your qualifications and/or experience, you may be found ineligible/not qualified.

    Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

    All qualification requirements must be met before being considered for any vacancies.



    • Does your resume demonstrate at least one year of specialized experience at or equivalent to the GS-13 grade level or pay band in the Federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following:

      -Experience of and mastery - level knowledge of cyber security functions, practices, cyber security methodologies and tools, and extensive experience in Risk Management Framework (RMF) processes and doctrine sufficient for effective management of day-to-day operations.

      -Experience assessing the threat, understanding the vulnerability and mitigating strategies, communicating requirements, and providing advice and guidance to users.


    • Does your resume demonstrate the following?
      Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
      Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations.
      Oral Communication - Expresses information to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
      Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives.


  • You will ensure the certification and accreditation of Navy systems and applications in accordance with DOD and DON RMF directives, instructions, and other national level policy documents to achieve Authority to Operate (ATO).
    You will process RMF packages using existing Navy planning, analysis, implementation, security programs and policies, and collaboration processes and tools.
    You will track, monitor, maintain, and support development of all documentation for Manpower, Analytics, and HR Systems (MAHRS) RMF packages.
    You will implement policies and procedures to ensure reliability and accessibility to prevent and defend against unauthorized access to systems, networks, and data.
    You will perform detailed analyses of operating system software and firmware to determine necessary cyber security safeguards.
    You will maintain liaison among the Navy Information Systems Security Managers (ISSMs), Information Systems Security Officers (ISSOs) and Program Security Officers (PSOs) and all stakeholders to enable smooth processing of the RMF package.
    You will develop point papers, briefings and training materials, decision memoranda, oral presentations, and technical, administrative and information papers on RMF issues.
    You will investigate, track, and report incidents and spillages for the organization.
    You will research new/emerging technologies and engineering solutions for Cybersecurity risks to ensure implementation of appropriate system security policies.
    You will develop transition and implementation plans for Cybersecurity and RMF processes.