Information Security Specialist

Full Job Description

This position is located in the Department of Health & Human Services (HHS), Centers for Medicare & Medicaid Services (CMS), Office of Information Technology (OIT), Information Security and Privacy Group (ISPG), Div of Strategic Information.

As a Information Security Specialist, GS-0080-14, you will you will be responsible for developing, coordinating, and planning a wide range of work methods or improvement of complex processes such as integration of the ICTC-SCRM Acquisition Security program.

ALL QUALIFICATION REQUIREMENTS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT.

Your resume (limited to no more than 2 pages) must include detailed information as it relates to the responsibilities and specialized experience for this position.

Evidence of copying and pasting directly from the vacancy announcement without clearly documenting supplemental information to describe your experience will result in an ineligible rating.

This will prevent you from being considered further.

In order to qualify for the GS-14, you must meet the following: You must demonstrate in your resume at least one year (52 weeks) of qualifying specialized experience equivalent to the GS-13 grade level in the Federal government, obtained in either the private or public sector, to include: 1) Developing and implementing a Supply Chain Risk Management (SCRM) and Information Communications Technology (ICT) Cyber-SCRM (CSCRM) program; 2) Reviewing Information Communications Technology (ICT) Cyber-Supply Chain Risk Management (C-SCRM) contracts to ensure that requirements are met; AND 3) Implementing requirements for securing the Information and Communications Technology and Services Supply Chain with specific emphasis on connected software applications.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social).

Volunteer work helps build critical competencies, knowledge, and skills, and can provide valuable training and experience that translates directly to paid employment.

You will receive credit for all qualifying experience, including volunteer experience.

Click the following link to view the occupational questionnaire: https://apply.usastaffing.gov/ViewQuestionnaire/12904500 Major Duties:

• Coordination and policy development of an enterprise wide and inter-agency process for the analysis of transactions of all work and contract actions related to ICT and CSCRM functions.
• Develop the methods and processes to conduct C-SCRM risk assessments and impacts to national security risks and foreign influence for all CMS ICT contract actions.
• Develop criteria for evaluating the effectiveness of the systems and makes recommendations which improve/update existing operations.
• Establish a process to assess and manage ICT supply chain risks, identify vulnerabilities and threats throughout the ICT supply chain lifecycle, and analyzes the impact of those vulnerabilities and threats.
• Monitor ICT supply chain risks, and prioritizes and mitigates identified risks based on criticality across the organization.