IT Cybersecurity Specialist
The Office of the Chief Information Officer (OCIO) serves as the IT hub of the U.S. Department of Labor. We develop, maintain and protect IT solutions and data across our 27 agencies to enable mission outcomes through technology and service. OCIO continually enhances federal IT and digital capability with a focus on cybersecurity and customer experience to serve America's wage earners, job seekers and retirees.
The position may be located at any of the DOL office locations, if available. The advertised salary range reflects the minimum and maximum pay for all locations. Final salary will be determined based on the selectee's assigned duty station in accordance with applicable locality pay tables. The role supports the Chief Information Officer (OCIO) and its Directorate of Cybersecurity, which consists of the following divisions: Cybersecurity Governance, Cybersecurity Authorization, and Security Operations Center. Under the direction of the Department's Chief Information Security Officer(CISO), the Directorate manages the enterprise-wide organizational risk associated with the operation of unclassified and classified information systems through a distribution model that provides resiliency in the face of evolving threats. Major duties include, but are not limited to: Independently plan, execute, and complete complex cybersecurity assignments, applying advanced knowledge of information security principles, federal requirements, and enterprise IT environments. Implement and validate compliance with FISMA, NIST SP 800-53, and the Risk Management Framework (RMF) by assessing controls, documenting artifacts, and recommending corrective actions. Conduct formal security assessments, audits, and reviews, including evaluating controls, collecting evidence, and making risk determinations to ensure regulatory and departmental compliance. Monitor enterprise systems to ensure cybersecurity controls remain effective and aligned with federal requirements. Work collaboratively across IT, development, operations, and business units to identify, analyze, and resolve cybersecurity risks. Ensure security requirements are integrated into new and modernized systems, cloud solutions, and emerging technologies. Suggest and implement practical security solutions to meet compliance and operational requirements. Evaluates existing methods and procedures and recommends improvements for enhanced security and operational efficiency. Partner with IT teams to identify, mitigate, and remediate vulnerabilities and ensure security measures are fully integrated. Maintain accurate and complete information in CSAM and prepares standard or recurring cybersecurity reporting. Participate in security awareness initiatives and stays current with evolving data privacy and cybersecurity trends to strengthen organizational security practices.