IT Specialist (INFOSEC) Privacy Coordinator

Summary The Department of Clinical Research Informatics (DCRI) seeks candidates for an exciting career opportunity. As an IT Specialist (INFOSEC) Privacy Coordinator, you'll use project management techniques and insights to provide program direction, ensuring appropriate technology use and information management that supports privacy, IT initiatives, and drives health and research productivity in innovative Clinical Care and Biomedical Research. Responsibilities Serving as a principal contact for coordination, implementation, and enforcement of information security policies. Initiating, developing, implementing, and evaluating the security programs of an organization, including the implementation of security programs designed to anticipate, assess, and minimize system vulnerabilities. Leading and coordinating the implementation of security programs across platforms and establishes vulnerability reporting criteria and enforces proper backup procedures for all system and network information. Enforcing information security policies; implements higher-level security requirements; and integrates security programs across disciplines. Contributing to NIH-wide initiatives that ensure the confidentiality, integrity, and availability of NIH information system resources that play a vital role in facilitating the NIH mission. Reviewing proposed new systems, networks, and software designs for potential security risks; and resolves integration issues related to the implementation of new systems with the existing infrastructure. Recommending operational policies, procedures, and criteria for interfacing with program systems resources, and coordinates with stakeholders to develop information security system and application policies, guidelines, and procedures. Reviewing and evaluating security incident response policies; identifies the need for changes based on new security technologies or threats, and tests and implements new policies. Participating in creating and maintaining system-security plans, contingency plans, risk assessments, and certification statements. Requirements Conditions of Employment Qualifications In order to qualify for the IT Specialist (INFOSEC) Privacy Coordinator, GS-2210-13 position, you must posses : IT related experience demonstrated by paid or unpaid experience obtained in either the private or public sector, and / or completion of specific, intensive training that demonstrates that you possess each of the following four competencies : 1. Attention to Detail - is thorough when performing work and conscientious about attending to detail; 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services; 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately; 4. Problem Solving - identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND You must demonstrate in your resume that you have at least one (1) year of qualifying experience equivalent to at least the GS-12 level in the Federal service obtained in either the private or public sector, typically gained in the IT field or through performing IT related tasks such as : developing, implementing, and evaluating the security programs of an organization; implementing security programs across organizational platforms; complying with vulnerability reporting criteria and backup procedures for all system and network information; monitoring compliance with enforcement of information security policies; and recommending operational policies, procedures, and criteria for interfacing with program systems resources. You will receive credit for all experience material to the position, including experience gained in religious, civic, welfare, service, and organizational activities, regardless of whether you received pay. Do not copy and paste the duties, specialized experience, or occupational assessment questionnaire from this announcement into your resume as that will not be considered a demonstration of your qualifications for this position. To determine your qualifications and referral status, we may review your resume and supporting documentation and compare it against your responses to the vacancy questionnaire. Ensure you support your self-ratings with the information you provide in your application. We may verify or assess your qualifications at any time. Inflated or unsupported qualifications may affect your rating. Any misrepresentation or material omission of facts may be sufficient cause to end further consideration of your candidacy. Persons listed as knowing your past accomplishments or experience in your application may be contacted for verification purposes at any time. Verification may, but need not, begin before receiving an offer. Preview assessment questionnaire before you apply : Education Additional Information This position is designated as a Tier II "non-emergency / teleworker" position and the selected candidate will be considered a Tier II "non-emergency / teleworker" employee. In the event of a closure, you must be available to telework or request leave. A one-year trial / probationary period may be required upon selection / placement. A newly appointed or reappointed employee may receive service credit for prior work experience or active duty uniformed service that otherwise would not be creditable for the purpose of determining his or her annual leave accrual rate. All creditable service must be directly related to the duties of the position being filled and decisions to allow for such credit must be finalized prior to the selectee's entrance on duty. Recipients will be determined on a case-by-case basis based on organizational need, specific case justification, and budget limitations. At the supervisor's discretion, this position may offer work schedule flexibilities : Telework (work from home on a regular basis or ad hoc basis but reports to the office at least once a week / two days a pay period). At the supervisor's discretion, this position may offer work schedule flexibilities : Alternative Work Schedules such as compressed schedules, flexible schedules, etc. A one-year probationary period may be required upon selection / placement. PHS Commissioned Officers interested in performing the duties of this position within the Commissioned Corps should also apply online to this announcement in order to receive consideration. The National Institutes of Health participates in the USCIS Electronic Employment Eligibility Verification Program (E-Verify). E-Verify helps employers determine employment eligibility of new hires and the validity of their Social Security numbers. The NIH maintains a tobacco free work environment and campus. Must be able to perform the essential duties of the position, with or without reasonable accommodation. Visit our Applicant FAQs page for helpful information on the application process. Visit our Total Compensation page and this sample for a detailed look into the benefits, awards, leave, retirement, and other incentives employees may receive as part of a rewarding work environment. If selected, you may be eligible to receive a salary above the minimum based on superior qualifications and / or a special need of the Government for your services. This applies to employees paid under the General Schedule (GS) and Federal Wage System (FWS) pay systems and is at the discretion of the hiring manager. A salary above the minimum must be approved before the appointment.