IT Cybersecurity Specialist

Summary

This position is located in the Small Business Administration, Office of the Chief Information Officer in Washington, DC. The incumbent serves as an Information Technology (IT) Cybersecurity Specialist for the U.S. Small Business Administration (SBA). This vacancy is open to CTAP and ICTAP eligible candidates only. If you are not eligible for one of these you will be made ineligible for consideration for this position.

Duties

• As an IT Cybersecurity Specialist at the GS- 2210-14, some of your typical work assignments may include: Lead risk and vulnerability assessments of enterprise information systems to identify vulnerabilities, risks, and protection needs and support remediation. Provide technical oversight of cybersecurity requirements and implementations, develop long-range security plans, and design enterprise security controls. Evaluate enterprise security programs, assess compliance, identify gaps, and recommend improvements to minimize vulnerabilities and strengthen program effectiveness. Investigate security incidents, develop security resolutions, implement remediation measures, and strengthen authentication and authorization controls.

Qualifications

GS-14: You must demonstrate the competencies required to successfully perform the duties of the position. These competencies are normally attained through one year of specialized experience equivalent to the next lower grade level of the position being filled but may be obtained through other means. Experience may be paid or unpaid (internships, volunteerism). Experience must be validated through the assessment process, consistent with OPM's skills-based hiring policy. Qualifying specialized experience includes: - Leading risk and vulnerability assessments, such as directing comprehensive risk assessments and vulnerability analyses of enterprise systems, networks, and software to identify systemic weaknesses and inform mitigation strategies. - Building cybersecurity architecture, such as developing long-range system security strategies to ensure confidentiality, integrity, and availability of enterprise systems. - Evaluating cybersecurity programs, such as assessing enterprise cybersecurity programs to identify gaps, ensure compliance with organizational requirements, and recommend improvements to enhance overall program effectiveness. Specialized experience must show demonstrable competencies aligned to the position's job analysis and the IT-2210 standard. These qualifications must be clearly referenced in your resume. Additional information on the qualification requirements is outlined in the OPM Qualifications Standards Handbook of General Schedule Positions. It is available for your review on OPM's Qualifications web site: Information Technology Management Series, 2210 Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g. Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Generally, time in Non-Pay status as a federal employee is not creditable towards the specialized experience requirement listed above. All qualification requirements must be met by 11:59 pm (Eastern Time) on 11/11/2026.

Education

APPLICANTS PLEASE NOTE: Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications (particularly positions with a positive education requirement.) Therefore, applicants must report only attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education. Verify School accreditation. All education claimed by applicants will be verified by the appointing agency accordingly. If you are selected for this position and qualified based on education (i.e. basic education requirement and/or substitution of education), you will be required to provide an OFFICIAL transcript prior to your first day on duty. *** If you are using foreign education to meet qualification requirements, you must send a Certificate of Foreign Equivalency with your transcript in order to receive credit for that education. *** For further information, click on: Foreign Education.