IT Specialist (Security)

Incumbent will serve as an IT Specialist (Security) with the Cybersecurity Governance Branch (AIS-110).As a vital member of the Cybersecurity Governance Branch (AIS-110) within the FAA's Information Security & Privacy Services (AIS) Directorate, you will play a critical role in fortifying the security of the agency's networks and infrastructure. Operating within a broader division that oversees IT security compliance and the agency's 24x7 Security Operations Center (SOC), your primary focus will be managing the complete lifecycle of the FAA¿s enterprise cybersecurity and privacy policies. You will actively develop, review, and update these policies, standards, and standard operating procedures (SOPs) to ensure strict alignment with federal frameworks, such as NIST and FISMA. By coordinating seamlessly with the Department of Transportation (DOT), FAA Lines of Business (LOBs), and Security Operations (SOs), you will interpret complex regulatoryrequirements and ensure all directives reflect the most current threat landscapes and agency mission needs. Furthermore, you will leverage the latest technology and tools to maintain meticulous documentation and strict version control for all cybersecurity procedures. Beyond policy creation, you will serve as a key risk advisor by evaluating, processing, and tracking information security and privacy deviation requests, including risk acceptance memos and production data usage requests. This involves coordinating directly with requesters to gather necessary information, identifying the specific risks posed to the FAA enterprise, and briefing AIS leadership on your findings. You will facilitate the appropriate signatures, ultimately submitting risk acceptance requests to the

FAA CISO

and CIO for final approval. To ensure these frameworks are effective in practice, you will conduct periodic policy audits and comprehensive risk assessments, utilizing compliance findings to recommend actionable updates and actively support the implementation and enforcement of cybersecurity controls across all agency systems and departments. In addition to project and stakeholder oversight, you will play a critical role in financial stewardship and resource management. You will collaborate with functional, technical, and operational teams to effectively allocate staff, contractors, and financial resources across various cybersecurity projects. This includes managing and monitoring the department's budget through multi-year planning, detailed cost tracking, submitting acquisition requests, and assisting with contracts to ensure strict alignment with fiscal policies and funding constraints. Beyond core program management, you will be instrumental in modernizing the agency's operational efficiency through technology. You will design, analyzerequirements for, and integrate automated workflows across critical Information Security and Privacy Services (AIS) operations, including Privacy, Cyber Program Management, Governance, Compliance,