Apply on Employer Site

USAJOBS · 1 month ago

Deputy Director IT (Audit) - Technology Operations Directorate

Multiple Locations, USA

Full-time

Hybrid

Director/Executive

$159K/yr - $195K/yr

10+ years exp

The United States Postal Service Office of Inspector General (USPS OIG) is seeking a highly qualified applicant to fill the Deputy Director IT (Audit) position within the Office of Audit's Technology Operations Directorate. This role involves directing and coordinating cybersecurity and technology-related inspections to ensure the security and reliability of USPS information systems.

ConsultingGovernmentHuman ResourcesInformation TechnologyInternetStaffing Agency

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Overseeing a team responsible for the overall management, control, coordination, and execution of assigned projects. As the project team leader, implementing agency decisions, guidance, laws, regulations, and policy in the development of Information technology related audit projects

Functioning as a recognized technical/professional expert regarding information technology and cybersecurity. Leading technical aspects of complex information systems audits of the United States Postal Service (or similar organization), including the data collection efforts needed to develop conclusions and recommendations

Leading and executing advanced cybersecurity testing initiatives, including vulnerability assessments and penetration testing, aligned with federal cybersecurity frameworks (e.g., NIST, FISMA)

Designing and implementing automated testing protocols for evaluating the security posture of enterprise IT systems, including cloud-based and hybrid environments

Conducting hands-on technical assessments of network infrastructure, endpoint security, and application controls to identify systemic weaknesses and recommend mitigation strategies

Utilizing tools such as Nessus, Metasploit, Wireshark, and custom scripts to simulate threat actor behavior and assess system resilience

Interpreting and synthesizing test results into actionable audit findings, briefing senior leadership and stakeholders on technical risks and remediation priorities

Integrating technical testing outcomes into broader audit strategies to ensure comprehensive evaluation of USPS (or similar agency) information systems and cybersecurity programs

Evaluating agency programs and operations for compliance and adherence to regulations and adequacy of internal controls over operation. Ensuring the rigorous application of information security/information assurance policies, principles, and practices to the delivery of application software services

Providing authoritative advisory service and/or developing authoritative policy interpretations for matters related to information technology audits and operations and related data analytics

Actively participating in key decision-making sessions conducted by audit executives and having input into decisions affecting programs outside the employee's purview

Providing guidance to teams on unusually complex or difficult problems encountered during assignments. As necessary, attending offsite visits to furnish advice and guidance on unique or highly complex cybersecurity and technology projects

Leading assignments requiring the application of advanced information technology principles, concepts, techniques, and guidelines in the area of auditing or audit evaluation

Counseling and guiding subordinates to ensure that the approved audit objectives and schedules are met, and that adequate practical coverage is achieved

Participating in or leading meetings with OIG and USPS (or similar organizations) officials to communicate results of work

Reviewing agency use of emerging technology and its implementation and recommending potential audit areas

Coordinating and developing assessment methodologies for cybersecurity and technology related policies and procedures, in accordance with the Federal Information Security Modernization Act (FISMA) and other relevant policies and directives

Developing and coordinating action plans and Rules of Engagement procedures with the US Postal Service (or similar organization) Chief Information Officer (CIO) and Chief Information Security Office (CISO)

Qualification

CybersecurityInformation Technology AuditingVulnerability AssessmentsPenetration TestingInformation Systems Security Manager (ISSM)Certified Information Systems Security Professional (CISSP)IT Project Management Professional (PMP)Offensive Security Certified Professional (OSCP)Certified Information Systems Auditor (CISA)Data AnalyticsStrategic PlanningTeam LeadershipCommunication Skills

Required

Education must be accredited by an institution recognized by the U.S. Department of Education

Degree in information security, information assurance, computer science, information technology, cybersecurity, networking; or related field such as auditing, program management, or information management. (must submit transcripts from an accredited college or university)

At least ten (10) years of progressive, specialized hands-on experience in network infrastructure, cyber defense systems, or cybersecurity testing such as vulnerability assessments and penetration testing

The applicant's background must also include one of the following: Certificate as an Information Systems Security Manager (ISSM), Certified Information Systems Security Professional (CISSP), IT Project Management Professional (PMP), Offensive Security Certified Professional (OSCP), Certified Information Systems Auditor (CISA) or similar certification

Must be a U.S. citizen

Must be able to pass a drug screening

Must be able to pass a background investigation

Must be able to obtain and maintain a Top-Secret (Tier 5) clearance

Must be able to obtain and maintain a government-issued credit card

May be required to successfully complete a 12-month probationary period

Preferred

Advanced degree

Experience with using techniques from a range of disciplines, including computer programming, mathematics, and statistics, to draw conclusions from data to describe, predict, and improve performance

Use of Linux based IT security testing platforms, AI and data analytics is a plus