Summary Join VA's Office of Information Security (OIS) to help protect VA's IT systems and Veteran data from cyber threats. As a It Specialist (Infosec), you'll enforce federal IT security policies, support network defense, and strengthen VA's cyber resilience as part of a team that values security and education. Advance your career by contributing to VA's digital transformation-apply today! Responsibilities NCWF Code(s): 612 Category-Security Control Assessor I 461 Category- Systems Security Analyst Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change. Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks. Provide input to the Risk Management Framework process activities and related documentation ( e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials). Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network. Verify that application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations. Participate in Risk Governance process to provide security risks, mitigations, and input on other technical risk. Insure the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, policies, procedures, and tools. Ensure all systems security operations and maintenance activities are properly documented and updated as necessary. Develop policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data. Promotion Potential: This position is at its full performance level. Work Schedule: Monday-Friday 8 am-4:30 pm Compressed/Flexible: At the manager's discretion Telework: Telework eligibility will be discussed during the interview process. Virtual: This is not a virtual position. Position Description/PD#: It Specialist (Infosec)/PD20101A Relocation/Recruitment Incentives: Not Authorized Permanent Change of Station (PCS): Not Authorized PCS Appraised Value Offer (AVO): Not Authorized Physical Requirements: The work is sedentary. Some work may require walking and standing in conjunction with travel and to attendance at meetings and conferences away from the work site. Some employees may carry light items, such as papers, books, or small parts, or drive a motor vehicle. The work does not require any special physical effort. Occasional travel may be required. Work Environment: The work area is adequately lighted, heated, and ventilated. The work environment involves everyday risks or discomforts that require normal safety precautions. Some employees may occasionally be exposed to uncomfortable conditions in such places as research and production facilities. Requirements Conditions of Employment You must be a U.S. Citizen to apply for this job You may be required to serve a probationary period Subject to background/security investigation Selected applicants will be required to complete an online onboarding process. Acceptable form(s) of identification will be required to complete pre-employment requirements (https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents). Beginning September 27, 2025, Federal agencies will only accept resumes up to two pages in length to comply with the Merit Hiring Plan. Resumes longer than two pages will result in ineligibility for further consideration for the position. USAJOBS will not allow you to upload or build resumes longer than two pages, and you will need to update the resumes in your profile before applying for a job. Resumes should include information relevant to the knowledge, skills, abilities, and competencies of the position to which you are applying. VA is unable to make assumptions about qualifications if not clearly listed. Resumes must be legible so they can be reviewed for eligibility, minimum qualifications and other position requirements listed in the job announcement. Your resume must be 5MB or less. We recommend saving and uploading your resume as a PDF to maintain formatting and number of pages. We also accept GIF, JPG, JPEG, PNG, RTF, TXT, PDF, ODT or Word (DOC or DOCX). We do not accept PDF portfolio files. We recommend using a sans-serif font size like Lato, if available. As a condition of employment for accepting this position, you will be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: your performance and conduct; the needs and interests of the agency; whether your continued employment would advance organizational goals of the agency or the Government; and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. Qualifications To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 06/23/2026. You must meet the basic requirement, specialized experience and selective placement factor to qualify for this series as described below: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade GS-12 in the normal line of progression for the occupation in the organization. Examples of specialized experience would typically include, but are not limited to: Experience independently reviewing and analyzing cybersecurity risk management data from multiple sources to identify risks, conduct comprehensive assessments of IT system security controls in accordance with NIST SP 800-37, and perform activities to improve enterprise cybersecurity processes; supporting Risk Management Framework (RMF) functions, including Governance, Risk and Compliance (GRC) activities, and facilitating compliance with OIG FISMA and FISCAM audits; and in conducting security control assessments, developing security authorization packages, and monitoring ongoing compliance with federal cybersecurity requirements. AND Selective Placement Factor: Direct experience applying the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) to include conducting security control assessments, developing authorization packages, and documenting security requirements for information technology systems at the agency or enterprise level. Direct experience supporting Risk Management Framework (RMF) compliance functions to include Governance, Risk and Compliance (GRC) capabilities and OIG Federal Information Security Management Act (FISMA) and Federal Information System Controls Audit (FISCAM) Audits. For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/. Education There is no educational substitution at this grade level. Additional Information This is not a remote position. OIT has multiple worksites at various duty locations, and the individual(s) selected may be assigned to any federal government work site. This announcement will NOT be used for changing duty locations. If selected, and you are a current VA employee, and not on an approved exemption, you will continue to report to your current duty location. If selected you will be required to report to one of the following locations: Albany, NY; Arlington, TX; Atlanta, GA; Austin, TX; Baltimore, MD; Bedford, MA; Boston, MA; Chicago, IL; Cleveland, OH; Dallas, TX; Denver, CO; Detroit, MI; Eatontown, NJ; Hines, IL; Houston, TX; Little Rock, AR; Long Beach, CA; Los Angeles, CA; Martinsburg, WV; Miami, FL; Minneapolis, MN; Nashville, TN; Oakland, CA; Orlando, FL; Philadelphia, PA; Phoenix, AZ; Pittsburgh, PA; Salt Lake City, UT; San Antonio, TX; San Francisco, CA; Seattle, WA; Shepherdstown, WV; St. Louis, MO; St. Petersburg, FL; Tampa, FL; Washington, DC. If space is not immediately available a temporary exception to telework may be granted. If/when workspace is identified, the employee is expected to report to their assigned duty location Under the Fair Chance to Compete Act, the Department of Veterans Affairs prohibits requesting an applicant's criminal history prior to accepting a tentative job offer. For more information about the Act and the complaint process, visit Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP) at The Fair Chance Act. Receiving Service Credit or Earning Annual (Vacation) Leave: Federal Employees earn annual leave at a rate (4, 6 or 8 hours per pay period) which is based on the number of years they have served as a Federal employee. VA may offer newly-appointed Federal employee's credit for their job-related non-federal experience or active duty uniformed military service. This credited service can be used in determining the rate at which they earn annual leave. Such credit must be requested and approved prior to the appointment date and is not guaranteed. This job opportunity announcement may be used to fill additional vacancies. If you are unable to apply online or need an alternate method to submit documents, please reach out to the Agency Contact listed in this Job Opportunity Announcement. The Career Transition Assistance Plan (CTAP) provide eligible displaced VA competitive service employees with selection priority over other candidates for competitive service vacancies. To be qualified you must submit appropriate documentation (a copy of the agency notice, your most recent performance rating, and your most recent SF-50 noting current position, grade level, and duty location) and be found well-qualified for this vacancy. To be well-qualified: applicants must possess experience that exceeds the minimum qualifications of the position including all selective factors, and who are proficient in most of the required competencies of the job. Information about CTAP eligibility is on OPM's Career Transition Resources website at http://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/.
