Summary

This position is in the Division of Administration (DA) in the Information Technology (IT) Branch, Cybersecurity Section. This position serves as the Chief Information Security Officer (CISO) reporting to the Chief Information Officer (CIO).

Duties

As the CISO, the incumbent is responsible for managing and overseeing the Commission's Cybersecurity compliance and operations units’ activities to ensure compliance with best practices and keep pace with emergent cybersecurity threats. Duties may include:

• Manage strategic planning and roadmap for the entire cybersecurity program to include strategic/contingency plans for Cyber Incidents of all likely scales and types and perform reviews and testing updates per CIO direction.
• Plans and oversees formal assessments of Information Systems, mitigate risk through managing the Assessment and Authorization (A&A) process for assuring that existing and new IT systems meet organization’s cybersecurity and risk requirements.
• Oversee the preparation of Authority to Operate (ATO) packages for Authorizing Official’s signature.
• Ensure CISO programs and initiatives are strategically aligned and communicated throughout the Commission through evaluation of adequacy for the Commission’s IT security controls and systems.
• Conduct and support routine internal and external security assessments, tabletop exercises, penetration tests, and playbook development to proactively test the effectiveness of the CFTC's IT Cybersecurity Program.
• Responsible for CFTC’s Cybersecurity Program annual budget report to Congress in highlighting the Commission’s progress for meeting mission goals and protecting the agency’s information and IT systems.
• Establishes a comprehensive and effective IT Cybersecurity Program in compliance with Federal laws and regulations by implementing, and managing IT policies, guidelines, standards, processes and management controls.
• Mitigates risk through managing the assessment and authorization process for assuring existing and new IT systems meet organization’s cybersecurity and risk requirements.
• Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an IT system to determine the overall effectiveness of the controls (as defined in NIST SP 800-37).
• In case of a cybersecurity incident, the response leads by following established crisis management and plans and communicating laterally and vertically as required.
• Uses mitigation, preparedness, and response and recovery approaches, as needed, to optimize the information security posture of the Commission.
• Conducts regular crisis management exercises to validate agency response plans.
• Engage with other external organizations to seek and identify opportunities for sharing best practices, strategies, resources and capabilities in support of the development and implementation of an innovative and effective program appropriate to a Federal financial regulatory agency.

Requirements

Conditions of employment U.S. Citizenship Males born after 12-31-1959 must be registered for Selective Service Background/Security Investigation is required May be required to serve a supervisory probationary period May be required to file a Financial Disclosure You will be evaluated on the basis of your level of competency (knowledge, skills and abilities) in the following areas:

• Leadership
• Developing Others
• Attention to Detail
• Customer Service
• Decision Making
• Information Management
• Interpersonal Skills
• Oral/Written Communication
• Problem Solving
• Reasoning
• Teamwork
• Technical Competence

Qualifications

In addition to meeting the competency requirement listed in the requirements section of this announcement, you must have at least one year of specialized experience at the next lower GS grade level (or equivalent). Specialized experience is experience that has equipped you with the specific competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT.

CT-15 Level: To qualify for the CT-15 level you must have at least one year of specialized experience equivalent to the next lower grade (GS/CT-14 level). Specialized experience is defined as: Experience managing the agency’s policy and implementation to ensure that plans and procedures are in place to ensure recovery and continued operations of the department’s information systems in the event of disruption; Conduct and support routine internal and external security assessments to evaluate the strength and effectiveness of the agency’s Cybersecurity program; and Effectively communicate and resolve a crisis or urgent matter within the pertinent domain to mitigate immediate and potential threats through preparedness, investigation, and the use of response and recovery as appropriate to maximize information security. (NOTE: Your resume must CLEARLY demonstrate this experience.) AND Basic Requirement: In addition to the Specialized Experience above, you must meet the basic requirements for the Information Technology (IT) Management Series 2210 as described below.

Education

Education is not required, nor may it be substituted for specialized experience. Please refer to the OPM Qualifications Standard listed in the "Qualifications Section" of this announcement.

Additional information

This is position is not located in the Bargaining Unit. Relocation: Relocation expenses will not be paid. Probationary Period: As a condition of employment for accepting this position, you may be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: Your performance and conduct; The needs and interests of the agency; Whether your continued employment would advance organizational goals of the agency or the Government; and Whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary/trial period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. You may be required to complete a one-year supervisory probationary period. You may be required to file a Financial Disclosure. More than the number of positions listed may be filled through this vacancy announcement. The overall salary range is provided for informational purposes as it represents the full range that is applicable to current employees in this occupation/grade. A new hire's direct and overall experience are critical factors in determining a salary offer, therefore, it is important that your resume fully reflects all of your work experience. Note that the upper end of each range is typically applicable only to candidates with significant years of work experience and qualifications Please review the CFTC Compensation Program website for additional information. The law prohibits public officials from appointing, promoting, or recommending their relatives. The law prohibits requesting, making, transmitting, accepting, or considering political recommendations for employment or other personnel actions for non-political positions. This includes recommendations from Members of Congress, Congressional employees, elected state or local officials, and political party officials and any recommendation based on party affiliation. Correction: The bargaining unit status for this position has been revised. This position is not included in the bargaining unit. Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new window Learn more about federal benefits. Review our benefits Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.