Information Technology Specialist (Security) (Direct Hire)

Summary

As an Information Technology (Security) specialist with the NASA Office of Inspector General, Office of Audits (OA), you will conduct independent, objective audits, reviews, and other examinations of NASA and NASA contractor programs and projects to improve NASA IT systems operations.

Responsibilities

Duties described below are at the highest grade advertised. Duties assigned at lower grade levels will be of more limited scope, performed with less independence and limited complexity; duties will be commensurate with the grade of selected employee.

Conducts IT security audits and evaluations of hardware and software applications, network and telecommunications infrastructure, operational practices, system development activities, and regulatory compliance.

Develops approaches and contributes to objectives for short- and long-term audits of information technology systems, programs, and operations based on identified risks.

Applies research and analytical methods to assess system security controls, identify vulnerabilities, and operational impacts

Analyzes technical evidence and audit results, develops findings and corrective-action recommendations, and prepares oversight, policy analysis, and performance management reports to support management decisions.

Provides technical advice on information technology projects, software, policies, and services; evaluates security and operational risks and recommends improvements.

Serves as a technical resource to auditors and investigators on information technology security processes, controls, vulnerabilities, and incidents.

Qualifications

Specialized experience is experience that has equipped you with the particular ability, skill, and knowledge to successfully perform the duties of this position and is typically in or related to this line of work. To qualify for GS-12, you must have one year of directly related specialized experience equivalent to the GS-11 level. Participating in information technology security audits or evaluations to assess system operations, security controls, and compliance with applicable cybersecurity requirements. Reviewing technical evidence and participating in risk and vulnerability assessments of information systems to identify security weaknesses and compliance deficiencies. Participating in the preparation of IT security audit or assessment results and documenting identified vulnerabilities, compliance deficiencies, or recommending corrective actions. To qualify for GS-13, you must have one year of directly related specialized experience equivalent to the GS-12 level. Conducting information technology security audits or evaluations using analytical methods to assess system operations, security controls, and compliance with applicable cybersecurity requirements. Analyzing technical evidence and conducting risk and vulnerability assessments of information systems to identify security deficiencies, evaluate associated risks, and recommend corrective actions. Preparing IT security audit or assessment reports that document findings, identify security deficiencies, and recommend corrective actions to improve information system security or regulatory compliance. AND IF you are qualifying based on experience, you MUST also have IT-related experience demonstrating each of the nine competencies listed below: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change. Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems. Interpersonal Skills - Treats others with courtesy, sensitivity, and respect. Considers and responds appropriately to the needs and feelings of different people in different situations. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Teamwork - Works well with others in a team environment to achieve goals; helps engender team spirit and commitment by encouraging, modeling, and/or facilitating cooperation, pride, trust, and a sense of group identity among team members. Technical Competence - Uses knowledge that is acquired through formal training or extensive on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues. Your resume must include a clear and detailed narrative description, in your own words, of how you meet the required specialized experience. Experience statements copied from a position description, vacancy announcement or other reference material constitutes plagiarism and may result in disqualification and losing consideration for the job. Please visit https://www.nasa.gov/careers/how-to-apply/#Super-Intelligence to review NASA's guidance on the use of super intelligent (SI) or SI-assisted tools during the application process.