Virginia Licensed Systems Security Specialist

Job Summary

Managing the Medicare information security program, the full-time Virginia Licensed Systems Security Specialist will ensure compliance with CMS security requirements, respond to security breaches, and coordinate vulnerability management while operating independently of IT operations.

Key responsibilities

• Comply with CMS system security policies and respond to security breaches, reporting vulnerabilities as per CMS requirements
• Designate security clearance levels and manage personnel security responsibilities, including onboarding and off-boarding procedures
• Conduct vulnerability scanning and maintain the Plan of Action and Milestones (POA&M) while supporting Security Assessment and Authorization (SA&A) activities

Required qualifications

• Minimum 5 years of combined work experience, with at least 3 years in healthcare supporting Federal Government agencies or the commercial healthcare market
• Knowledge of Medicare program and familiarity with CMS information security requirements, including FISMA and HIPAA
• Bachelor's degree in Information Systems, Computer Science, or a related field, or equivalent relevant work experience
• Active information security certification such as CISSP, CISM, CISA, or Security+ is preferred
• Experience with SCAP-compliant vulnerability scanning and managing data protection for PHI/PII under HIPAA and CMS requirements