Cybersecurity Compliance Office Lead (O-6 Billet) Supervisory

About the role

The Cybersecurity Compliance Office Lead role supervises program managers, coordinates authorization and continuous-monitoring activities, manages risks and compliance milestones, supports acquisition and contract teams, and provides leadership with readiness assessments and recommended actions. This position is only open to current USPHS officers.

USPHS Call to Active Duty (CAD) candidates are not eligible for this position.

What you will do

• Supervises and leads a team of three Cybersecurity and Privacy Program Managers responsible for cybersecurity and privacy compliance workstreams.
• Establishes workload distribution, priorities, timelines, documentation standards, and quality expectations for the office.
• Serves as the accountable CAMS leader for program and portfolio management of cybersecurity and privacy compliance work across the IHSC health information technology portfolio.
• Directs management of milestones, schedules, dependencies, action items, risk visibility, and required coordination activities.
• Ensures cybersecurity and privacy requirements are identified during acquisition planning and reflected in acquisition requirements documentation before an acquisition is referred to the contracting office.
• Coordinates with the Acquisition Planning Office to ensure compliance requirements are incorporated early in the acquisition lifecycle.
• Oversees office support provided in coordination with the ICE Office of the Chief Information Officer for authorization-related activities, including Risk Management Framework documentation, required artifacts, milestones, and coordination with system owners, Authorizing Officials, and information system security officers.
• Maintains visibility of continuous-monitoring activities across the portfolio, including compliance status, open findings, corrective actions, dependencies, and aging items requiring attention.
• Ensures significant compliance issues are tracked, assigned, elevated, and resolved through the appropriate authorized officials.
• Establishes Government programmatic priorities and requirements for assigned cybersecurity and privacy compliance activities.
• Coordinates contractor performance through the Contracting Officer or an appointed Contracting Officer's Representative, as appropriate, while preserving Government decision-making authority.
• Coordinates with privacy officials to ensure potential privacy implications are identified early and formal privacy reviews occur at an appropriate point in the acquisition and system lifecycle.
• Ensures privacy-related requirements, risks, and actions are documented and routed to officials holding formal authority.
• Coordinates with the Portfolio Management Office to ensure cybersecurity and privacy milestones, dependencies, constraints, and risks are accurately reflected in enterprise schedules, planning documents, and portfolio-management activities.
• Coordinates with the Acquisition Planning Office and Contract Governance Office to ensure cybersecurity and privacy obligations carry through from acquisition planning into contract performance, oversight, and transition activities.
• Identifies, assesses, and escalates material security, privacy, and compliance risks.
• Provides CAMS and HITU leadership with recommendations, readiness assessments, and analysis of likely programmatic, schedule, cost, and mission impacts.
• Provides unit leadership with portfolio status reports, compliance-posture summaries, risk assessments, and readiness information supporting executive decision-making.
• Translates technical cybersecurity and privacy information into clear programmatic impacts and recommended actions for executive leadership, program officials, and acquisition personnel.
• Develops and implements office operational plans, procedures, documentation standards, recordkeeping practices, and process improvements necessary to achieve CAMS and HITU objectives.
• Captures institutional knowledge to support continuity through personnel transitions.
• Performs supervisory duties, including performance management, work planning, coaching, mentoring, employee development, and accountability for assigned officers.
• Identifies developmental needs and ensures completion of required position-specific training.
• Establishes and enforces appropriate information-protection practices.
• Ensures proper handling of procurement-sensitive, proprietary, security, privacy, and system information.
• Performs other duties as assigned.

Education

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES: Ability to lead multidisciplinary projects, workstreams, and portfolios involving program, acquisition, technical, cybersecurity, privacy, and compliance stakeholders.

Working knowledge of cybersecurity and privacy compliance practices, including authorization activities, compliance documentation, risk management, and continuous monitoring, sufficient to manage work and recognize material risks.

Ability to understand technical cybersecurity and privacy discussions, ask informed questions, and translate technical findings into programmatic, schedule, cost, and mission impacts.

Knowledge of the acquisition lifecycle sufficient to ensure cybersecurity and privacy requirements are incorporated into acquisition planning and contract performance rather than addressed after award. Ability to supervise, develop, evaluate, and hold accountable assigned professional staff; assign work by portfolio; and establish clear ownership and performance expectations.

Ability to coordinate contractor-provided technical support while maintaining appropriate Government authority and ensuring that Government decisions remain with authorized Government officials. Ability to communicate concisely and effectively with executive leadership, including presenting adverse security, privacy, or compliance information with a recommendation for action.

Ability to recognize the boundary between coordinating activities involving an authority and exercising that authority, and to route decisions to the officials who hold the appropriate decision-making authority.

Ability to build and sustain productive working relationships with program officials, acquisition personnel, technical specialists, privacy officials, cybersecurity officials, system owners, contractors, and executive leadership.

Ability to establish, maintain, and enforce documentation and recordkeeping standards while protecting sensitive acquisition, security, privacy, proprietary, and system information. Ability to exercise sound, independent judgment in managing complex, sensitive, and mission-critical programmatic issues.

Ability to adapt to changing priorities, schedules, workload requirements, and mission needs. MINIMUM QUALIFICATIONS Applicants must meet the education and professional requirements applicable to their USPHS professional category.

No specific academic discipline is required for this position.

Applicants must demonstrate progressively responsible program-management experience, including experience leading or supervising professional staff and coordinating work performed by technical specialists.

Applicants must have at least two years of experience in one or more of the following areas: Cybersecurity, information security, information assurance, information technology governance, or related work; Privacy, information governance, compliance, risk management, or related work; Authorization support, continuous monitoring, Risk Management Framework activities, or related compliance work; Program management, project management, contractor management, health information technology, health care technology, or comparable complex multidisciplinary work.

Leadership, judgment, program-management capability, and demonstrated effectiveness in complex, regulated, or mission-driven environments are primary evaluation criteria. Technical depth in a single specialty does not substitute for the ability to lead an office and coordinate work across organizational boundaries.

Relevant preparation may be demonstrated through a combination of prior cybersecurity, privacy, program-management, project-management, compliance, governance, health information technology, authorization-support, or contractor-management experience; relevant coursework; professional training; or professional certifications.

Certifications such as Security+, Project Management Professional, Certified in Governance, Risk and Compliance, privacy credentials, or Federal Acquisition Certification for Contracting Officer's Representatives may strengthen an applicant's preparation but are not required.

If the incumbent holds a clinical license or certification, the incumbent is responsible for fulfilling the requirements of the applicable licensing or certifying body to maintain currency.

How you will be evaluated

We will review your resume and supporting documentation to ensure you meet the minimum qualification requirements. You may be selected for an interview at the hiring authority's discretion. You will be notified of selection or non-selection.

Documents you must provide

• To apply for this position, you must provide a complete Application Package.
• Please note that if you do not provide all required information, as specified in this announcement, you may not be considered for this position.
• A complete application includes: U.
• Public Health Service Officers Cover Letter/Letter of Interest.
• (Place under "Diploma/GED") Professional license.
• (If applicable) Additional professional certificates.
• (If applicable) Three professional references.
• (i.e., name, title and contact information) Official USPHS Promotion CV - e.g., relevant experience, education, training.
• (Place under "USPHS Promotion CV") You may provide a civilian resume in addition to the USPHS Promotion CV to capture all relevant work experience.
• A copy of your Certificate of Investigation (located in your eOPF). *Three most recent Commissioned Officer Effectiveness Reports (COER).
• (Place under "Performance Appraisal") For current IHSC PHS officers, IHSC Recruiting requires applicants to provide a copy of your current Service Remaining Requirements Agreement.
• Indicate if you have an Assignment Pay (AP) Agreement and the date of the end of your AP Agreement.
• If you do not, please submit a memo attesting to no AP in the Assignment Pay (AP) Agreement section in the documents section of application.

What to expect next

Once you submit your application, we will assess your experience and training, identify the best-qualified applicants, and refer those applications to the hiring manager for further consideration and interviews. We will notify you by email after each of these steps has been completed. Your status will also be updated on USAJOBS throughout the process.

To check your status, log on to your USAJOBS account, click on "Application Status," and then click "More Information." We expect to make a job offer within 60 days after the deadline for applications. If you are selected, we will conduct a suitability/security background investigation. View more information on applying for federal employment.

Additional information

This is a U.S. Public Health Service (PHS) position within the Department of Homeland Security (DHS), U.S. Immigration and Customs Enforcement (ICE), Enforcement and Removal Operations (ERO), ICE Health Service Corps (IHSC), Office of the Deputy Assistant Director of Administration, Health Information and Technology Unit (HITU), Contracts and Acquisition Management Section (CAMS), Cybersecurity Compliance Office (CCO).

This is a supervisory position. The incumbent serves as the Lead for the Cybersecurity Compliance Office and provides leadership, direction, and oversight to a team of three Cybersecurity and Privacy Program Managers.

The incumbent manages office performance, workload distribution, quality standards, and cybersecurity and privacy compliance activities across the IHSC health care technology portfolio. The incumbent reports directly to the CAMS Section Chief.

The incumbent leads CAMS coordination of cybersecurity and privacy compliance work from acquisition planning through post-award contract performance. This position is not a technical cybersecurity engineering position.

The incumbent manages schedules, documentation, dependencies, compliance activities, authorization support, continuous-monitoring items, risk visibility, and required actions associated with cybersecurity and privacy work. Formal cybersecurity and privacy decisions remain with the authorized officials who hold those authorities.

SUPERVISORY CONTROLS: The incumbent reports directly to the CAMS Section Chief. Assignments are generally broad, long-term, and mission-focused. The CAMS Section Chief establishes overall priorities, strategic objectives, organizational expectations, and resource parameters.

The incumbent independently plans, directs, prioritizes, and evaluates Cybersecurity Compliance Office operations; assigns portfolios and workstreams; establishes office procedures and quality standards; and coordinates cybersecurity and privacy compliance activities across the IHSC health care technology portfolio.

The incumbent applies applicable DHS, ICE, IHSC, cybersecurity, privacy, acquisition, and information technology governance policies, procedures, precedents, and guidance. The work requires interpretation and adaptation of guidance to address varying acquisition, system, technical, privacy, cybersecurity, schedule, and operational requirements.

The incumbent coordinates with authorized cybersecurity, privacy, acquisition, and system officials but does not make decisions reserved to those officials. The incumbent exercises supervisory authority over three Cybersecurity and Privacy Program Managers.

The incumbent provides work assignments, establishes performance expectations, evaluates work products, monitors workload and performance, provides coaching and developmental feedback, and takes appropriate action to address performance or conduct concerns.

The incumbent keeps the CAMS Section Chief informed of office performance, portfolio compliance posture, material risks, significant dependencies, staffing needs, emerging issues, and recommended actions.

Work is reviewed in terms of accomplishment of CAMS and HITU objectives, effectiveness of office operations, quality of supervisory leadership, adherence to applicable policy, and successful support of IHSC mission requirements.

Significant innovations, changes to office procedures, and modifications to established practices are coordinated with and approved by the CAMS Section Chief.