Work schedule: This position is full time/40 hour work week.
Agency: Other Agencies and Independent Organizations
Summary
This position is in the Division of Administration (DA) in the Information Technology (IT) Branch, Cybersecurity Section. This position serves as the Chief Information Security Officer (CISO) reporting to the Chief Information Officer (CIO).
Major duties
- As the CISO, the incumbent is responsible for managing and overseeing the Commission's Cybersecurity compliance and operations units' activities to ensure compliance with best practices and keep pace with emergent cybersecurity threats. Duties may include: Manage strategic planning and roadmap for the entire cybersecurity program to include strategic/contingency plans for Cyber Incidents of all likely scales and types and perform reviews and testing updates per CIO direction. Plans and oversees formal assessments of Information Systems, mitigate risk through managing the Assessment and Authorization (A&A) process for assuring that existing and new IT systems meet organization's cybersecurity and risk requirements. Oversee the preparation of Authority to Operate (ATO) packages for Authorizing Official's signature. Ensure CISO programs and initiatives are strategically aligned and communicated throughout the Commission through evaluation of adequacy for the Commission's IT security controls and systems. Conduct and support routine internal and external security assessments, tabletop exercises, penetration tests, and playbook development to proactively test the effectiveness of the CFTC's IT Cybersecurity Program. Responsible for CFTC's Cybersecurity Program annual budget report to Congress in highlighting the Commission's progress for meeting mission goals and protecting the agency's information and IT systems. Establishes a comprehensive and effective IT Cybersecurity Program in compliance with Federal laws and regulations by implementing, and managing IT policies, guidelines, standards, processes and management controls. Mitigates risk through managing the assessment and authorization process for assuring existing and new IT systems meet organization's cybersecurity and risk requirements. Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an IT system to determine the overall effectiveness of the controls (as defined in NIST SP 800-37). In case of a cybersecurity incident, the response leads by following established crisis management and plans and communicating laterally and vertically as required. Uses mitigation, preparedness, and response and recovery approaches, as needed, to optimize the information security posture of the Commission. Conducts regular crisis management exercises to validate agency response plans. Engage with other external organizations to seek and identify opportunities for sharing best practices, strategies, resources and capabilities in support of the development and implementation of an innovative and effective program appropriate to a Federal financial regulatory agency.
Requirements
You will be evaluated on the basis of your level of competency (knowledge, skills and abilities) in the following areas: Leadership Developing Others Attention to Detail Customer Service Decision Making Information Management Interpersonal Skills Oral/Written Communication Problem Solving Reasoning Teamwork Technical Competence
Education
Education is not required, nor may it be substituted for specialized experience. Please refer to the OPM Qualifications Standard listed in the "Qualifications Section" of this announcement.
How you will be evaluated
This vacancy is being filled through the Office of Personnel Management's Government-wide Direct Hire Authority for eCFR : 5 CFR Part 337 -- Examining System. Traditional rating and ranking procedures do not apply to this vacancy. Your application may be forwarded to the selecting official for the initial review process. HR will conduct the final qualifications review prior to any selection(s) made by the hiring official. Veteran's Preference does not apply to the direct hire recruitment procedures. Applicants may be rated on the extent and quality of experience, education, and training relevant to the duties of the position(s). Ensure that your application package/resume includes all qualifications requirements and required documentation listed in the vacancy announcement. You may preview questions for this vacancy.
How to apply
RESUME REQUIREMENT: Your resume may NOT exceed two pages, and the font size should not be smaller than 10 pts. Please ensure your resume clearly demonstrates how you meet the qualifications for the position within the two-page limit. YOU MUST APPLY ONLINE: Your complete application, including required documents, must be received by 11:59 p.m. Eastern Time (EST) on the closing date of this announcement. You must complete and submit an application by accessing the USAJOBS website at USAJOBS.GOV. To begin, click the Apply Online button within the vacancy announcement and follow the prompts to create an account using LOGIN.GOV, if you have not done so already. LOGIN.GOV will walk you through each step of the account set-up and will automatically link your USAJOBS profile to LOGIN.GOV. Once you have established an account using LOGIN.GOV, you will then go back to USAJOBS.GOV using your LOGIN.GOV username and password to answer the questions and submit all required documents. If you already have established an LOGIN.GOV account or want to return to your saved application, go to USAJOBS.GOV using your LOGIN.GOV username and password to apply or view your profile. If you have problems completing your on-line application, including problems submitting your supporting documents, please contact the Help Desk by e-mail at mgshelp@monster.com or phone at 1-866.656.6831. The help desk is available Monday-Friday, 7:00 a.m. to 7:00 p.m. EST. To verify the status of your application, log into your USAJOBS account (https://my.usajobs.gov/Account/Login), all of your applications will appear on the welcome screen. The Application Status will appear along with the date your application was last updated. For information on what each Application Status means, visit: https://www.usajobs.gov/Help/how-to/application/status/.
What to expect next
For information on what each Application Status means, visit: https://www.usajobs.gov/Help/how-to/application/status/. Please notify us if your contact information changes after the closing date of the announcement. Also, note that if you provide an email address that is inaccurate or if your mailbox is full or blocked (e.g., spam-blocker), you may not receive important communication that could affect your consideration for this position.
Source: USAJOBS (U.S. Office of Personnel Management) — https://www.usajobs.gov:443/job/888943300
Cite this job as: JOBnaru™ — https://jobnaru.com/en/jobs/supervisory-it-cybersecurity-specialist-direct-hire-commodity-futures-trading-co · Posted 2026-10-15 · Original posting: www.usajobs.gov:443