Summary This position is located in the Department of Veterans Affairs (VA), Office of Information and Technology (OIT), Compliance, Risk, and Remediation (CRR), Data Breach Response Services (DBRS) serving as an IT Specialist (INFOSEC) responsible for developing, maintaining, and administering a complex information security program. Responsibilities Major Duties: Plans, directs and coordinates a unified VA position on information security as it relates to Privacy and Security related breaches involving Protected Health Information (PHI), Personally Identifiable Information (PII) and Sensitive Personal Information (SPI). Coordinates VA Privacy and Security data breach program responses for external reporting requirements. Provides data breach analysis utilizing the Privacy and Security Events Tracking System (PSETS), reviews the information provided, prioritizes relevant facts, analyzes and assesses the submission, point out errors, incomplete or inconsistent data, and illogical arguments or conclusions. Directs the planning, evaluation, and coordination of Privacy and Security breach issues within VA, including the Administration and Staff offices. Provides coordinated responses and follow-up actions to Privacy and Security data breach audits and external oversight organizations and maintains secure files of such responses and actions as required. Synchronizes and reconciles VA's response to Federal-wide Privacy and Security breach related initiatives and proposals. Develops privacy training materials and other communications to increase employee understanding of company privacy policies, data handling practices and procedures and legal obligations. This position is primarily aligned to the following NICE Cybersecurity Workforce Framework work role: Cybersecurity Code 732: Privacy Compliance Manager. Develops and oversees privacy compliance program and privacy program staff, supporting privacy compliance needs of privacy and security executives and their teams. For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.us-cert.gov/workforce-development/cyber-career-pathways Position Description/PD#: IT Specialist (INFOSEC)/PD16736A Work Schedule: Monday - Friday 8:00 am - 4:30 pm; Tour of duty may be subject to change based on organizational needs. Compressed/Flexible: Available at Supervisor's discretion. Telework: Ad Hoc, as determined by Agency Policy. Virtual: This is not a virtual position. Relocation/Recruitment Incentives: Not Authorized Permanent Change of Station (PCS): Not Authorized Physical Demands: The work is primarily sedentary, although some slight physical effort may be required. Working Conditions: Work is typically performed in an adequately lighted and climate-controlled office. May require occasional travel. This is a Non-Bargaining Unit Position. Requirements Conditions of Employment You must be a U.S. Citizen to apply for this job. Selective Service Registration is required for males born after 12/31/1959. To be considered for this position, you must complete all required steps in the process. In addition to the application and questionnaire, this position requires an online assessment. The online assessment measures critical general competencies required to perform the job. You may be required to serve a probationary period. Subject to background/security investigation. Selected applicants will be required to complete an online onboarding process. Acceptable form(s) of identification will be required to complete pre-employment requirements (https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents). Effective May 7, 2025, driver's licenses or state-issued dentification cards that are not REAL ID compliant cannot be utilized as an acceptable form of identification for employment. As a condition of employment for accepting this position, you will be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: your performance and conduct; the needs and interests of the agency; whether your continued employment would advance organizational goals of the agency or the Government; and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. Qualifications To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 09/29/2026. You must meet the Minimum Qualification Requirements and Specialized Experience to qualify for this series as described below: Minimum Qualifications Requirements EXPERIENCE: To qualify for this position, you must have information technology-related experience demonstrating all of the four competencies listed below. Ensure that this experience is clearly described in your resume: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. -AND- SPECIALIZED EXPERIENCE: You must have one year of specialized experience equivalent to at least the next lower grade in the normal line of progression for the occupation in the organization. Specialized Experience is defined as experience developing, implementing, and managing complex information security and privacy programs; overseeing and coordinating organizational responses to privacy and security breaches; applying information security and privacy compliance requirements to evaluate contracts and interpret and apply applicable laws, regulations, policies, and reporting requirements; investigating, analyzing, and assessing data breach incidents using privacy and security systems to determine risk, prioritize facts, and recommend appropriate remediation and notification actions; collaborating with cross-functional stakeholders, including Privacy Officers, Information/System Security Officers, Human Resources, and Legal Counsel, to develop and implement privacy and security policies, procedures, and training; and providing technical guidance and recommendations to management and staff regarding breach response, remediation, audits, compliance activities, and enterprise-wide information security initiatives. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Note: A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/. Education There is no educational substitution at this grade level. Additional Information Under the Fair Chance to Compete Act, the Department of Veterans Affairs prohibits requesting an applicant's criminal history prior to accepting a tentative job offer. For more information about the Act and the complaint process, visit Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP) at The Fair Chance Act. Receiving Service Credit or Earning Annual (Vacation) Leave: Federal Employees earn annual leave at a rate (4, 6 or 8 hours per pay period) which is based on the number of years they have served as a Federal employee. VA may offer newly-appointed Federal employee's credit for their job-related non-federal experience or active duty uniformed military service. This credited service can be used in determining the rate at which they earn annual leave. Such credit must be requested and approved prior to the appointment date and is not guaranteed. The Interagency Career Transition Assistance Plan (ICTAP) and Career Transition Assistance Plan (CTAP) provide eligible displaced VA competitive service employees with selection priority over other candidates for competitive service vacancies. To be qualified you must submit appropriate documentation (a copy of the agency notice, your most recent performance rating, and your most recent SF-50 noting current position, grade level, and duty location) and be found well-qualified for this vacancy. To be well-qualified: applicants must possess experience that exceeds the minimum qualifications of the position including all selective factors, and who are proficient in most of the required competencies of the job (score 85 or above). Information about ICTAP and CTAP eligibility is on OPM's Career Transition Resources website at http://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/. Veterans and Transitioning Service Members: Please visit the VA for Vets site for career-search tools for Veterans seeking employment at VA, career development services for our existing Veterans, and coaching and reintegration support for military service members. This job opportunity announcement may be used to fill additional vacancies. If selected you will be required to report to one of the following locations: Little Rock, AR North Little Rock, AR Phoenix, AZ Anaheim, CA Long Beach, CA Los Angeles, CA Oakland, CA San Francisco, CA Aurora, CO Denver, CO Washington, DC Miami, FL Orlando, FL St. Petersburg, FL Tampa, FL Atlanta, GA Chicago, IL Hines, IL North Chicago, IL Bedford, MA Boston, MA Baltimore, MD Detroit, MI Minneapolis, MN St. Louis, MO Eatontown, NJ Albany, NY Cleveland, OH Philadelphia, PA Pittsburgh, PA Davidson, TN Nashville, TN Murfreesboro, TN Arlington, TX Austin, TX Dallas, TX Houston, TX San Antonio, TX Salt Lake City, UT SeaTac, WA Seattle, WA Martinsburg, WV Shepherdstown, WV
