IT Security Specialist (ISSO) for DevSecOps

Centers for Medicare & Medicaid Services; Woodlawn (MD); On-site; USD 110,000 - 135,000; Full time

Job summary

Centers for Medicare & Medicaid Services (CMS) is hiring an IT Specialist (Security) to lead security work as an ISSO for CMS websites, including CMS.gov, Healthcare.gov, and Medicare.gov. You will drive contractors to integrate security into the DevSecOps pipeline with compliance-as-code, automated scanning, and responsible security control evidence generation.

As an IT Specialist (Security), GS-2210-13, you will implement enterprise IT security policies, oversee security performance of

Qualifications

• Demonstrated attention to detail in security-relevant work.
• Strong customer service mindset to support diverse stakeholders.
• Clear oral communication for cross-team collaboration.
• Solid problem solving in incident handling and risk mitigation.

Responsibilities

• Act as the ISSO ensuring staff and contractors meet security and risk framework requirements (NIST 800-53, FISMA, FedRAMP).
• Oversee contractor and vendor security performance by evaluating security impacts, reviewing findings, and ensuring remediation and compliance.
• Lead incident response and continuous monitoring, coordinating with CMS security operations and ensuring 24x7 coverage.

Skills

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Job description

Centers for Medicare & Medicaid Services (CMS) is hiring an IT Specialist (Security) to lead security work as an ISSO for CMS websites, including CMS.gov, Healthcare.gov, and Medicare.gov. You will drive contractors to integrate security into the DevSecOps pipeline with compliance-as-code, automated scanning, and responsible security control evidence generation.

As an IT Specialist (Security), GS-2210-13, you will implement enterprise IT security policies, oversee security performance of