Summary Do you want to make an impact? The United States Postal Service Office of Inspector General (USPS OIG) is seeking a highly qualified applicant to fill our Deputy Director IT (Audit) position within the Office of Audit's Technology Operations Directorate. This opportunity is located in: Arlington, Virginia Bethesda, Maryland Dallas, Texas Denver, Colorado Woburn, Massachusetts Bring your skills and voice to our team! Responsibilities About the Technology Operations Directorate: The Technology Operations team conducts various @types of audits and evaluations of the Postal Service's cybersecurity and technology processes, tools, and operations. Our directorate helps to reduce the risk of fraud, inappropriate disclosure of sensitive data, and disruption of critical postal operations and services by assessing whether USPS information resources provide the highest level of security, reliability, and value expected by USPS customers. To learn more, visit: Office of Audit | About Us About the Position: The Deputy Director IT is responsible for directing, coordinating, planning, and performing sensitive and complex cybersecurity and technology related inspections and evaluations concerning USPS's overall information security program and related cybersecurity and technology programs in support of the OIG mission. As a technical authority, the employee provides expert level advice and guidance on advanced information technology topics to include planning, performing, and reporting on cybersecurity and technology related inspections and evaluations, reviews, and special projects performed by the Office of Audit. As a successful candidate, you will have relevant experience in and be responsible for: Overseeing a team responsible for the overall management, control, coordination, and execution of assigned projects. As the project team leader, implementing agency decisions, guidance, laws, regulations, and policy in the development of Information technology related audit projects. Functioning as a recognized technical/professional expert regarding information technology and cybersecurity. Leading technical aspects of complex information systems audits of the United States Postal Service (or similar organization), including the data collection efforts needed to develop conclusions and recommendations. Leading and executing advanced cybersecurity testing initiatives, including vulnerability assessments and penetration testing, aligned with federal cybersecurity frameworks (e.g., NIST, FISMA). Designing and implementing automated testing protocols for evaluating the security posture of enterprise IT systems, including cloud-based and hybrid environments. Conducting hands-on technical assessments of network infrastructure, endpoint security, and application controls to identify systemic weaknesses and recommend mitigation strategies. Utilizing tools such as Nessus, Metasploit, Wireshark, and custom scripts to simulate threat actor behavior and assess system resilience. Interpreting and synthesizing test results into actionable audit findings, briefing senior leadership and stakeholders on technical risks and remediation priorities. Integrating technical testing outcomes into broader audit strategies to ensure comprehensive evaluation of USPS (or similar agency) information systems and cybersecurity programs. Evaluating agency programs and operations for compliance and adherence to regulations and adequacy of internal controls over operation. Ensuring the rigorous application of information security/information assurance policies, principles, and practices to the delivery of application software services. Providing authoritative advisory service and/or developing authoritative policy interpretations for matters related to information technology audits and operations and related data analytics. Actively participating in key decision-making sessions conducted by audit executives and having input into decisions affecting programs outside the employee's purview. Providing guidance to teams on unusually complex or difficult problems encountered during assignments. As necessary, attending offsite visits to furnish advice and guidance on unique or highly complex cybersecurity and technology projects. Leading assignments requiring the application of advanced information technology principles, concepts, techniques, and guidelines in the area of auditing or audit evaluation. Counseling and guiding subordinates to ensure that the approved audit objectives and schedules are met, and that adequate practical coverage is achieved. Participating in or leading meetings with OIG and USPS (or similar organizations) officials to communicate results of work. Reviewing agency use of emerging technology and its implementation and recommending potential audit areas. Coordinating and developing assessment methodologies for cybersecurity and technology related policies and procedures, in accordance with the Federal Information Security Modernization Act (FISMA) and other relevant policies and directives. Developing and coordinating action plans and Rules of Engagement procedures with the US Postal Service (or similar organization) Chief Information Officer (CIO) and Chief Information Security Office (CISO). Requirements Conditions of Employment Qualifications The duties and responsibilities associated with this position may vary based upon the agency's needs at the time of hire. The preceding description of major duties and responsibilities is only intended to give applicants a general overview of the expectations. Compensation: The USPS OIG uses a Pay Banding system, which is equivalent to the Federal GS scale. Grade and salary determinations will be made based upon a candidate's education and professional experience. This position is being advertised at the Senior Specialist Band level, equivalent to a GS-15. The salary range for this position is $159,244.00 - $195,200.00. The salary figures include locality pay. For locality table specifics, visit: OPM's General Schedule (GS). Position Minimum Qualification Requirements You must meet all the minimum qualifications listed below. Education Requirement: Degree in information security, information assurance, computer science, information technology, cybersecurity, networking; or related field such as auditing, program management, or information management. (must submit transcripts from an accredited college or university) Professional Experience Requirement: At least ten (10) years of progressive, specialized hands-on experience in network infrastructure, cyber defense systems, or cybersecurity testing such as vulnerability assessments and penetration testing. The applicant's background must also include one of the following: Certificate as an Information Systems Security Manager (ISSM), Certified Information Systems Security Professional (CISSP), IT Project Management Professional (PMP), Offensive Security Certified Professional (OSCP), Certified Information Systems Auditor (CISA) or similar certification Desirable Qualifications Advanced degree. Experience with using techniques from a range of disciplines, including computer programming, mathematics, and statistics, to draw conclusions from data to describe, predict, and improve performance. Use of Linux based IT security testing platforms, AI and data analytics is a plus. Evaluation Factors | How you will be evaluated: You must have the experience, knowledge, and skills as listed in each of the evaluation factors listed below. Include your major accomplishments relevant to the position requirements and factors in your resume. Failure to demonstrate that you meet all the evaluation factor requirements as listed below will result in a score of zero (0), an ineligible status, and you will not be referred for further consideration. Ability to direct, coordinate, and plan sensitive and complex cybersecurity and technology-related inspections and evaluations for information security program and related technology platforms; develop and implement strategic plans, ensuring compliance with federal guidelines. Ability to lead and execute technical aspects of complex information systems audits and function as a recognized technical expert, providing guidance on planning, performing, and reporting on IT and cybersecurity inspections, evaluations, reviews, and special projects. Ability to lead and execute advanced technical testing in cybersecurity and IT audit environments, including vulnerability assessments and penetration testing. Demonstrated experience applying automated tools and manual techniques to assess system security, interpret results, and translate findings into actionable audit recommendations. Proven ability to integrate technical testing outcomes into broader audit strategies and communicate complex technical risks to both technical and non-technical stakeholders. Ability to coordinate, develop, and execute assessment methodologies for cybersecurity and technology-related policies and procedures such as FISMA and other relevant directives. Ability to oversee and lead a team responsible for execution of assigned projects; implement agency decisions, guidance, regulations, and policy, effectively delegate tasks, motivate team members, and ensure effective and efficient project completion. Ability to provide authoritative advisory services and strategic policy interpretations for IT audits, operations, and data analytics. Proven skill in coordinating and collaborating with internal and external stakeholders, developing action plans, and communicating complex technical information clearly and persuasively to technical and non-technical audiences. Education Education must be accredited by an institution recognized by the U.S. Department of Education. Applicants can verify accreditation here: www.ed.gov. Special Instructions for Candidates with Foreign Education: Education completed outside the United States must be deemed equivalent to that gained in U.S. education programs. You must submit all necessary documents to a private U.S. credential evaluation service to interpret equivalency of your education against courses given in U.S. accredited colleges and universities. For further information visit: https://sites.ed.gov/international/recognition-of-foreign-qualifications/. Additional Information Fair Labor Standards Act (FLSA) Status: Exempt. (Nonexempt employees are entitled to overtime pay; Exempt employees are not). Reasonable Accommodations This agency provides Reasonable Accommodations to applicants with disabilities. If you require accommodations for any part of the application and/or hiring process, please send an email to jobs@uspsoig.gov. The decision on granting an accommodation request will be made on a case-by-case basis.
