USA Staffing

Specialized experience: For the EL-13, you must have one year of specialized experience at a level of difficulty and responsibility equivalent to the EL/GS-12 grade level in the Federal service. For this position, specialized experience is defined as: demonstrated experience, and applying, Federal Information Security Modernization Act, Office of Management and Budget (OMB) Circular No. A-130, Appendix III, and National Institute of Standards and Technology (NIST) standards and guidelines when conducting performance audits over information technology/cyber security, in accordance with generally accepted government auditing standards (GAGAS) or equivalent non-federal auditing standards and guidelines.

In addition to specialized experience, individuals must have IT-related experience demonstrating each of the four competencies listed below:
A. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

B. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

C. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

D. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendation.

1. For the GS-13, select the answer that best describes your experience.

A. I have at least one (1) full year of specialized experience as described in the previous question AND possess all four competencies listed above in my IT-related experience.

B. I do not meet the specialized experience and competencies as outlined above.

2. Make sure experience is clearly documented in your resume. Please give the dates/resume reference when you gained this experience so it may be found to ensure you receive proper credit. (limit 250 characters)

3. Select the following choice(s) you have performed as part of your regular duties. Select all that apply.

A. Independently preparing proposals for future audits of IT systems, programs, and practices.

B. Conducting interviews to uncover information systems vulnerabilities and presenting findings in meetings or briefings.

C. Assisting in development of audit plans for assigned audits, including the steps needed to accomplish each audit objective.

D. None of the above.

4. Which of the following have you performed and or assisted in the following IT security control test work? Select all that apply.

A. Vulnerability assessments and penetration tests of systems and/or networks

B. Disaster recovery exercise assessments

C. Federal Information Security Modernization Act (FISMA) compliance testing

D. Tests of secured configurations of switches and routers

E. Secured configurations of web servers and web applications

F. Secured configurations Windows devices

G. Secured configurations of Unix systems

H. Security controls using guidance issued by the National Institute of Standards and Technology (e.g., NIST 800-53) or other standards setting bodies

I. None of the above.

5. Which answer best describes your experience working on multiple IT projects concurrently? Choose the best answer.

A. I have performed multiple IT tasks concurrently on a consistent basis with minimal supervision.

B. I have performed multiple IT tasks concurrently with some assistance from other IT specialists.

C. I have performed multiple IT tasks concurrently with significant assistance from other IT specialists.

D. None of the above.

6. Select the IT audit functions you have performed on a regular basis.

A. Conduct and document interviews and walkthroughs to document program processes.

B. Draft the audit report or report sections ensuring conformance of the documents with professional standards and policy.

C. I have analyzed audit results and provided findings in writing to upper management.

D. None of the above.

7. Which of the following represents your highest level of experience in the participation of organizational audits?

A. I have experience serving as the auditor-in-charge or performing assigned segments of highly technical audits of IT systems and information systems security programs and practices, ensuring the audit work conforms with applicable professional standards and policy.

B. I have led various teams of lower-graded staff in performing highly technical audits of information systems and network security and operations, and ensured audits conformed with professional standards.

C. I have participated on a team performing audits of information systems security programs.

D. None of the above.

8. Select all of the following communication method(s) you have used as part of your regular duties.

A. Drafting memoranda and interview notes

B. Preparing work papers

C. Drafting sections of audit reports

D. Drafting sections of audit reports

E. None of the above.

Select “Yes” or “No” to the following question(s).

9. I have experience attending and significantly participating in briefings with supervisors and auditee management to discuss issues, status of IT audits, outcomes of testing, and audit results.

A. Yes

B. No

10. Please give the dates/resume reference where you have gained this experience. (limit 250 characters)

11. Which of the following best describes your experience for providing written or oral communication in the field of information technology? Choose the best answer.

A. I have experience preparing and delivering written or oral presentations involving the communication of routine / non-complex IT information. (Examples of this experience include notification of organizational IT security risks or status updates.)

B. I have experience presenting audit findings (both written and oral) to supervisors or senior management.

C. I have experience preparing and delivering written or oral presentations that do not involve the field of information technology.

D. None of the above.

12. Select the statement that best describes your experience communicating technical information.

A. I have presented technical information to customers or general office staff.

B. I have routinely presented technical information to customers or general office staff.

C. I have presented technical information to co-workers.

D. I have routinely scheduled and hosted meetings to present technical information to senior managers as a subject matter expert.

E. I have routinely presented technical information to co-workers.

F. I have presented technical information to managers.

G. I have routinely presented technical information to customers or general office staff.

H. I have not presented technical information to any audience.

13. A critical attribute for successful performance as IT Specialist with the FHFA OIG Office of Audit is experience communicating information in a clear and non-technical manner, principally in the form of audit reports and audit-related documents such as workpapers. From the choices below, please select the one that best reflects your experience communicating in writing.

A. I have written audit findings, audit reports or audit report sections, college-level research papers, and/or other technical documents that are considered to be of high quality. High quality means that minimal changes to prepared documents are necessary before issuance, and the changes are generally limited to matters of preference as opposed to content required by professional standards, correcting grammar, organization, and tone. Almost no errors are made with respect to form and content applicable to the communication, as well as to proper names and the like.

B. I have written audit findings, audit reports or audit report sections, college-level research papers, and/or other technical documents that are considered to be of quality; some supervisory or other reviewer changes are necessary before issuance to correct content required by professional standards; correct grammar; improve organization and tone; and address issues with form, content, and use of proper names, but not as a routine.

C. I have written audit findings, audit reports or audit report sections, college-level research papers and/or other technical that routinely require supervisory or other reviewer changes to correct content required by professional standards, correct grammar, improve organization and tone, and/or address issues with form, content, and use of proper names.

D. I do not have experience writing audit findings, audit reports or audit report sections, college-level research papers, and/or other technical documents as defined in the above choices.

Terms & Conditions

Your Session is About to Expire!