Chief Information Security Officer

The National Institutes of Health (NIH), a part of the Department of Health and Human Services, is the largest biomedical research funding organization in the world. NIH is made up of 27 Institutes and Centers. The Office of the Director, in the NIH, is seeking exceptional candidates for the position of Director of Cybersecurity/Chief Information Security Officer. This is a career Federal position in the Senior Executive Service. See "Duties" section for a list of the majorresponsibilities.Provides executive level leadership, direction, and oversight for planning, coordination, and control of NIH-wide cybersecurity infrastructure and technology functions.Serves as the principal technical advisor to the Chief Information Officer (CIO), the Deputy Chief Information Officer, and other senior NIH officials on cybersecurity infrastructure and technology across the 27 institutes and centers.Ensures the cybersecurity programs are consistent with the current security and business needs and long-term goals of NIH.Manages continuous monitoring and remediation of potential and actual threats and vulnerabilities to NIH’s systems and data.Provides strategic planning, integration and support for NIH cybersecurity and counter-intelligence initiatives and physical security through collaboration with executives, research scientists, and technical internal and external groups.Assesses risks and improve the NIH information security.Directs and manages a cybersecurity program to protect NIH information and its assets, cybersecurity policy, and related functions (e.g., vulnerability management, intrusion detection and incident response, and continuous monitoring, etc.).Represents the CIO and Deputy CIO in meetings with NIH and HHS officials, OMB, representatives of business and industry, Congressional committees and staff, and other matters involving plans, programs, policies, and objectives of the OCIO and NIH.Works with organizational units and partners to implement practices that meet agreed-on policies and standards for information security and privacy.Ensures that NIH cybersecurity infrastructure and technology meet allrequirements in compliance with Federal laws, regulations, and best practices.Manages an annual budget of approximately $77M and directs a staff of approximately 50 federal employees and 150 contractors.