Healthcare IT Security Governance Leader

Commence, LLC; Virginia Beach (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Commence, LLC is recruiting for an IT Security Governance Officer to implement CMS information security controls and lead SA&A activities. You will develop and maintain SSP/POA&M, coordinate training, and ensure encryption and asset management compliance.

This role requires collaboration with CMS teams and cross‑functional stakeholders. The ideal candidate brings 5+ years in healthcare IT security, familiarity with FISMA, FedRAMP, HIPAA, and CMS policies, and a track record in governance

Qualifications

• Minimum 5 years in IT security with CMS or federal healthcare focus.
• Strong knowledge of CMS requirements, FISMA, FedRAMP and HIPAA.
• Experience leading security governance activities and audits.

Responsibilities

• Learn, document, and implement CMS information security controls per CMS policies.
• Oversee SA&A process and SSP/POA&M documentation.
• Ensure security training and compliance records are maintained annually.
• Coordinate with CMS Incident Response Team and respond within timeframes.
• Maintain asset inventory and encryption/configuration standards per CMS.

Skills

IT security

CMS knowledge

Security governance

FISMA knowledge

HIPAA compliance

Incident response

Education

Bachelor's degree

Tools

EPPE system

BPSSM

Job description

Commence, LLC is recruiting for an IT Security Governance Officer to implement CMS information security controls and lead SA&A activities. You will develop and maintain SSP/POA&M, coordinate training, and ensure encryption and asset management compliance.

This role requires collaboration with CMS teams and cross‑functional stakeholders. The ideal candidate brings 5+ years in healthcare IT security, familiarity with FISMA, FedRAMP, HIPAA, and CMS policies, and a track record in governance