Assoc. Chief Info. Officer for Cybersecurity and Information Protection/Chief Info. Security Officer

$147,649 - $213,000/Yr

United States Department of Transportation - Washington, DC

Full-time - Senior

Washington, DC

Administration of Economic Programs

About the position

The Chief Information Security Officer (CISO) serves as the Associate Chief Information Officer (ACIO) for Cybersecurity and Information Protection in the Department of Transportation's (DOT) Office of the Chief Information Officer. This position is critical in leading the agency's cybersecurity efforts, ensuring the protection of sensitive information, and promoting secure digital practices across the DOT enterprise. The CISO will work closely with the Chief Information Officer (CIO), peer ACIOs, and various DOT components to develop and implement strategies that safeguard DOT's data and systems. This role is essential for maximizing compliance with federal policies and regulatory requirements while ensuring the resiliency of systems that support the DOT mission and its stakeholders. The CISO is expected to establish and enforce cybersecurity policies and strategies across the DOT, develop and implement cybersecurity practices for the Office of the Secretary and all Operating Administrations, and engage with the Security Operations Center to monitor and analyze cybersecurity threats. This position also involves leading a team of cybersecurity professionals and responding urgently to suspected cybersecurity incidents, coordinating the agency's response and recovery efforts. The CISO will maintain a professional network to receive threat intelligence from federal agencies, cybersecurity consultants, and other sources, ensuring that the DOT remains at the forefront of cybersecurity practices. In addition to technical expertise, the CISO must possess strong leadership and communication skills, fostering a culture of security and privacy awareness among DOT personnel and partners. This role requires a dynamic leader who is passionate about cybersecurity and committed to building an effective and collaborative cybersecurity team within the DOT.

Responsibilities

• Serve as DOT's senior cybersecurity professional responsible for implementing federal cybersecurity requirements.
• Establish and enforce DOT cybersecurity policies and strategies.
• Develop and implement cybersecurity practices for the Office of the Secretary and all Operating Administrations.
• Engage with DOT's Security Operations Center for real-time monitoring of cybersecurity threats.
• Lead a team of cybersecurity professionals and a Cyber Operations Corps.
• Respond urgently to suspected cybersecurity incidents and coordinate the agency's response and recovery efforts.
• Maintain a professional network for threat intelligence from federal agencies and cybersecurity consultants.

Requirements

• Must be a U.S. Citizen.
• Demonstrated expertise and leadership in Continuous Diagnostics and Mitigation (CDM) and/or Cybersecurity and Information Protection.
• Ability to understand and keep abreast of developing cybersecurity threats and trends.
• In-depth knowledge and success leading a cybersecurity enterprise while abiding by federal laws and regulations.
• Evidence of progressively responsible supervisory, managerial, or professional experience in managing significant programs or organizations.

Nice-to-haves

• Experience with Executive Order 14028 Improving the Nation's Cybersecurity.
• Familiarity with the National Cybersecurity Strategy published by the Office of the National Cyber Director.
• Strong communication skills and ability to foster a culture of security awareness.

Benefits

• Annual Leave (26 days), Sick Leave (13 days), and 10 paid holidays per year.
• Health benefits for employees and family members at reasonable rates.
• Flexible Spending Account (FSA) for medical expenses or dependent care costs.
• Participation in the Federal Long Term Care Insurance Program.
• Life Insurance through the Federal Employees' Group Life Insurance program.