IT Specialist (Security)

U.S. Department of Health and Human Services; Woodlawn (MD); On-site; USD 90,000 - 120,000; Full time

Job summary

The U.S. Department of Health and Human Services is seeking an IT Specialist (Security) at the GS-2210-13 level in CMS/OIT/ISPG/DSPC.

The role combines governance, risk management, and compliance engineering with system development and platform maintenance. Applicants must meet basic and minimum qualifications by the closing date, and will demonstrate attention to detail, customer service, strong oral communication, and solid problem-solving capabilities while working with GRC tools and security

Qualifications

• Attention to detail and thorough when performing work.
• Strong customer service skills to assess needs and provide information.
• Excellent oral communication tailored to audience and situation.
• Strong problem-solving and sound judgment to evaluate alternatives.

Skills

Attention to detail

Customer service

Oral communication

Problem solving

Job description

This position is located in the Department of Health & Human Services (HHS), Centers for Medicare & Medicaid Services (CMS), Office of Information Technology (OIT), Information Security and Privacy Group (ISPG), Division of Security and Privacy Compliance (DSPC).

As a IT Specialist (Security), GS-2210-13, you will serve as the Governance, Risk Management, and Compliance (GRC) Technical Engineer, System Developer, and Platform Maintainer.

ALL QUALIFICATION REQUIREMENTS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT.

Your resume (limited to no more than 2 pages) must include detailed information as it relates to the responsibilities and specialized experience for this position. Evidence of copying and pasting directly from the vacancy announcement without clearly documenting supplemental information to describe your experience will result in an ineligible rating. This will prevent you from being considered further.

There is a Basic Requirement and Minimum Qualification Requirement for this position. You must meet both requirements.

Basic Requirement:

• (1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• (2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• (3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• (4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Minimum Qualification for the GS-13:

• In order to qualify for the GS-13 you must meet the following: You must demonstrate in your resume at least one year (52 weeks) of qualifying specialized experience equivalent to the GS-12 grade level in the Federal government, obtained in either the private or public sector, to include:
  • 1) Configuring, developing, or maintaining a Governance, Risk, and Compliance (GRC) platform (such as CMS Acceptable Risk Safeguards Compliance Tracking System (CFACTS), Archer Integrated Risk Management (IRM), or similar industry GRC tools) to support IT security compliance tracking.
  • 2) Applying system development practices such as application configuration, workflow design, integration development, or structured data formats (e.g., JavaScript Object Notation (JSON), eXtensible Markup Language (XML), YAML Ain’t Markup Language (YAML)).
  • 3) Applying IT security compliance requirements (such as Federal Information Security Modernization Act (FISMA) or the Authorization to Operate process) to support documentation or compliance reporting activities.

Volunteer and Experience:

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills, and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.