Skip to main content
Immigration and Customs Enforcement logo

Cybersecurity Compliance Office Lead (O-6 Billet) Supervisory

Immigration and Customs Enforcement
1 day ago
Full-time
On-site
United States
$1 - $1 USD yearly

Duties

DUTIES AND RESPONSIBILITIES:

  1. Supervises and leads a team of three Cybersecurity and Privacy Program Managers responsible for cybersecurity and privacy compliance workstreams. Establishes workload distribution, priorities, timelines, documentation standards, and quality expectations for the office.
  2. Serves as the accountable CAMS leader for program and portfolio management of cybersecurity and privacy compliance work across the IHSC health information technology portfolio. Directs management of milestones, schedules, dependencies, action items, risk visibility, and required coordination activities.
  3. Ensures cybersecurity and privacy requirements are identified during acquisition planning and reflected in acquisition requirements documentation before an acquisition is referred to the contracting office. Coordinates with the Acquisition Planning Office to ensure compliance requirements are incorporated early in the acquisition lifecycle.
  4. Oversees office support provided in coordination with the ICE Office of the Chief Information Officer for authorization-related activities, including Risk Management Framework documentation, required artifacts, milestones, and coordination with system owners, Authorizing Officials, and information system security officers.
  5. Maintains visibility of continuous-monitoring activities across the portfolio, including compliance status, open findings, corrective actions, dependencies, and aging items requiring attention. Ensures significant compliance issues are tracked, assigned, elevated, and resolved through the appropriate authorized officials.
  6. Establishes Government programmatic priorities and requirements for assigned cybersecurity and privacy compliance activities. Coordinates contractor performance through the Contracting Officer or an appointed Contracting Officer's Representative, as appropriate, while preserving Government decision-making authority.
  7. Coordinates with privacy officials to ensure potential privacy implications are identified early and formal privacy reviews occur at an appropriate point in the acquisition and system lifecycle. Ensures privacy-related requirements, risks, and actions are documented and routed to officials holding formal authority.
  8. Coordinates with the Portfolio Management Office to ensure cybersecurity and privacy milestones, dependencies, constraints, and risks are accurately reflected in enterprise schedules, planning documents, and portfolio-management activities.
  9. Coordinates with the Acquisition Planning Office and Contract Governance Office to ensure cybersecurity and privacy obligations carry through from acquisition planning into contract performance, oversight, and transition activities.
  10. Identifies, assesses, and escalates material security, privacy, and compliance risks. Provides CAMS and HITU leadership with recommendations, readiness assessments, and analysis of likely programmatic, schedule, cost, and mission impacts.
  11. Provides unit leadership with portfolio status reports, compliance-posture summaries, risk assessments, and readiness information supporting executive decision-making. Translates technical cybersecurity and privacy information into clear programmatic impacts and recommended actions for executive leadership, program officials, and acquisition personnel.
  12. Develops and implements office operational plans, procedures, documentation standards, recordkeeping practices, and process improvements necessary to achieve CAMS and HITU objectives. Captures institutional knowledge to support continuity through personnel transitions.
  13. Performs supervisory duties, including performance management, work planning, coaching, mentoring, employee development, and accountability for assigned officers. Identifies developmental needs and ensures completion of required position-specific training.
  14. Establishes and enforces appropriate information-protection practices. Ensures proper handling of procurement-sensitive, proprietary, security, privacy, and system information.
  15. Performs other duties as assigned.

Requirements

Conditions of employment

  • You must be a U.S. citizen to apply for this position.
  • You must successfully pass a background investigation.
  • You must successfully pass a drug screen.
  • Males born after 12/31/59 must certify registration with Selective Service.
  • Requirements by Closing Date: Unless otherwise noted, you must meet all requirements by the closing date of the announcement.
  • Service Remaining Requirement Agreement: Upon appointment to this position, officers will be required to serve an 18 to 24-month commitment to IHSC.
  • ASSIGNMENT PAY AGREEMENT: You must not have a current Assignment Pay Agreement. However, if you have a current Assignment Pay Agreement, it must be fulfilled within 90 days of your application submission.
  • Applicants must be a current USPHS Commissioned Corps Officer. USPHS Call to Active Duty (CAD) candidates are not eligible for this position. Civilians are not eligible for this position.
  • PHS officers must participate in IHSC TDY On-Call Schedule (ITOS.) ITOS is either an entire month or two 16-day periods a year where, depending on the needs of the agency, the officer is required to be available to serve.

Qualifications

PHYSICAL DEMANDS:

  1. Sit and/or stand for extended periods of time, generally six to eight hours.
  2. Perform repeated bending motions.
  3. Use average manual dexterity for computer operation.
  4. Use a telephone for extended periods.
If the incumbent is a clinician, the incumbent may be required to perform temporary duty assignments in support of field operations for a minimum of two weeks and a maximum of 30 days annually.

Education

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES:

  1. Ability to lead multidisciplinary projects, workstreams, and portfolios involving program, acquisition, technical, cybersecurity, privacy, and compliance stakeholders.
  2. Working knowledge of cybersecurity and privacy compliance practices, including authorization activities, compliance documentation, risk management, and continuous monitoring, sufficient to manage work and recognize material risks.
  3. Ability to understand technical cybersecurity and privacy discussions, ask informed questions, and translate technical findings into programmatic, schedule, cost, and mission impacts.
  4. Knowledge of the acquisition lifecycle sufficient to ensure cybersecurity and privacy requirements are incorporated into acquisition planning and contract performance rather than addressed after award.
  5. Ability to supervise, develop, evaluate, and hold accountable assigned professional staff; assign work by portfolio; and establish clear ownership and performance expectations.
  6. Ability to coordinate contractor-provided technical support while maintaining appropriate Government authority and ensuring that Government decisions remain with authorized Government officials.
  7. Ability to communicate concisely and effectively with executive leadership, including presenting adverse security, privacy, or compliance information with a recommendation for action.
  8. Ability to recognize the boundary between coordinating activities involving an authority and exercising that authority, and to route decisions to the officials who hold the appropriate decision-making authority.
  9. Ability to build and sustain productive working relationships with program officials, acquisition personnel, technical specialists, privacy officials, cybersecurity officials, system owners, contractors, and executive leadership.
  10. Ability to establish, maintain, and enforce documentation and recordkeeping standards while protecting sensitive acquisition, security, privacy, proprietary, and system information.
  11. Ability to exercise sound, independent judgment in managing complex, sensitive, and mission-critical programmatic issues.
  12. Ability to adapt to changing priorities, schedules, workload requirements, and mission needs.
MINIMUM QUALIFICATIONS

Applicants must meet the education and professional requirements applicable to their USPHS professional category. No specific academic discipline is required for this position.

Applicants must demonstrate progressively responsible program-management experience, including experience leading or supervising professional staff and coordinating work performed by technical specialists.

Applicants must have at least two years of experience in one or more of the following areas:
  • Cybersecurity, information security, information assurance, information technology governance, or related work;
  • Privacy, information governance, compliance, risk management, or related work;
  • Authorization support, continuous monitoring, Risk Management Framework activities, or related compliance work;
  • Program management, project management, contractor management, health information technology, health care technology, or comparable complex multidisciplinary work.
Leadership, judgment, program-management capability, and demonstrated effectiveness in complex, regulated, or mission-driven environments are primary evaluation criteria. Technical depth in a single specialty does not substitute for the ability to lead an office and coordinate work across organizational boundaries.

Relevant preparation may be demonstrated through a combination of prior cybersecurity, privacy, program-management, project-management, compliance, governance, health information technology, authorization-support, or contractor-management experience; relevant coursework; professional training; or professional certifications. Certifications such as Security+, Project Management Professional, Certified in Governance, Risk and Compliance, privacy credentials, or Federal Acquisition Certification for Contracting Officer's Representatives may strengthen an applicant's preparation but are not required.

If the incumbent holds a clinical license or certification, the incumbent is responsible for fulfilling the requirements of the applicable licensing or certifying body to maintain currency.

Additional information

This is a U.S. Public Health Service (PHS) position within the Department of Homeland Security (DHS), U.S. Immigration and Customs Enforcement (ICE), Enforcement and Removal Operations (ERO), ICE Health Service Corps (IHSC), Office of the Deputy Assistant Director of Administration, Health Information and Technology Unit (HITU), Contracts and Acquisition Management Section (CAMS), Cybersecurity Compliance Office (CCO). This is a supervisory position.

The incumbent serves as the Lead for the Cybersecurity Compliance Office and provides leadership, direction, and oversight to a team of three Cybersecurity and Privacy Program Managers. The incumbent manages office performance, workload distribution, quality standards, and cybersecurity and privacy compliance activities across the IHSC health care technology portfolio. The incumbent reports directly to the CAMS Section Chief.

The incumbent leads CAMS coordination of cybersecurity and privacy compliance work from acquisition planning through post-award contract performance. This position is not a technical cybersecurity engineering position. The incumbent manages schedules, documentation, dependencies, compliance activities, authorization support, continuous-monitoring items, risk visibility, and required actions associated with cybersecurity and privacy work. Formal cybersecurity and privacy decisions remain with the authorized officials who hold those authorities.

SUPERVISORY CONTROLS:
The incumbent reports directly to the CAMS Section Chief.

Assignments are generally broad, long-term, and mission-focused. The CAMS Section Chief establishes overall priorities, strategic objectives, organizational expectations, and resource parameters. The incumbent independently plans, directs, prioritizes, and evaluates Cybersecurity Compliance Office operations; assigns portfolios and workstreams; establishes office procedures and quality standards; and coordinates cybersecurity and privacy compliance activities across the IHSC health care technology portfolio.

The incumbent applies applicable DHS, ICE, IHSC, cybersecurity, privacy, acquisition, and information technology governance policies, procedures, precedents, and guidance. The work requires interpretation and adaptation of guidance to address varying acquisition, system, technical, privacy, cybersecurity, schedule, and operational requirements. The incumbent coordinates with authorized cybersecurity, privacy, acquisition, and system officials but does not make decisions reserved to those officials.

The incumbent exercises supervisory authority over three Cybersecurity and Privacy Program Managers. The incumbent provides work assignments, establishes performance expectations, evaluates work products, monitors workload and performance, provides coaching and developmental feedback, and takes appropriate action to address performance or conduct concerns.

The incumbent keeps the CAMS Section Chief informed of office performance, portfolio compliance posture, material risks, significant dependencies, staffing needs, emerging issues, and recommended actions. Work is reviewed in terms of accomplishment of CAMS and HITU objectives, effectiveness of office operations, quality of supervisory leadership, adherence to applicable policy, and successful support of IHSC mission requirements. Significant innovations, changes to office procedures, and modifications to established practices are coordinated with and approved by the CAMS Section Chief.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.