Job description
As the Chief Information Security Officer with the U.S. Office of Personnel Management, Office of the Chief Information Officer, you will direct agency-wide cybersecurity policies, risk management, security engineering, incident response, and supply chain security programs while managing resources to protect agency systems and information. Direct agency-wide cybersecurity policies, data classification standards, and security requirements governing information systems, emerging technologies, and secure software development. Oversee cybersecurity governance, risk assessments, security authorization recommendations, compliance monitoring, vulnerability remediation, and responses to audits and oversight requirements. Direct the agency's supply chain risk management program, including assessments of third-party security risks, acquisition security requirements, and software supply chain protections. Manage the embedded security engineering program, establishing security review processes, engineering standards, and safeguards throughout the system development lifecycle. Lead agency-wide cybersecurity incident response, including incident declarations, containment and recovery coordination, required reporting, and corrective action tracking. Supervise cybersecurity personnel through subordinate supervisors and team leads, including performance management, staffing, employee development, and workforce planning.…
