IT Specialist (Security)

Summary

This position is located in the Department of Health & Human Services (HHS), Centers for Medicare & Medicaid Services (CMS), Office of Information Technology, OIT, Information Security and Privacy Group. As a IT Specialist (Security), GS-2210-9, you will support the implementation and dissemination of agency-wide information privacy and security policies, procedures, and standards for the information and information technology systems that support the operations and assets of CMS.

Duties

• Serve as the lead analyst for CMS privacy compliance activities, including the development, review and maintenance of System of Records Notices (SORNs), Information Exchange Agreements (IEAs) and Computer Matching Agreements (CMAs).
• Evaluate CMS information systems, programs, and data flows to identify privacy risks and gaps in compliance and recommends risk-based mitigation strategies consistent with NIST, OMB, and HHS guidance.
• Interpret, apply and support implementation of federal privacy and information security statutes and guidance.
• Review legislation regulations, policies and CMS initiatives to identify privacy and information security implications and recommends appropriate policy, procedural or technical safeguards.
• Participate in and supports investigations of suspected or confirmed privacy incidents involving CMS systems or data.

How You Will Be Evaluated

You will be evaluated based on how well you meet the qualifications listed in this vacancy announcement. Your qualifications will be evaluated based on your application materials (e.g., resume, supporting documents), the responses you provide in the application questionnaire, and the results of the online assessment(s) required for this position. A Subject Matter Expert may assist in the resume review process to help determine whether you meet the minimum job qualifications. Please follow all instructions carefully.

Errors or omissions may affect your rating. You will be assessed on the following competencies (knowledge, skills, abilities, and other characteristics): Reading Comprehension Decision Making Accountability Attention to Detail Customer Service Flexibility Integrity/Honesty Interpersonal Skills Learning Self Management Stress Tolerance Teamwork Reasoning In order to be considered for this position, you must complete all required steps in the process. In addition to the application and application questionnaire, this position requires an online assessment. The online assessment measures critical general competencies required to perform the job.

Overstating your qualifications and/or experience in your application materials or application questionnaire may result in your removal from consideration. Cheating on the online assessment may also result in your removal from consideration. RPL Applicants RPL applicants who are verified as registered for the same series, grade, and location as this vacancy announcement will be placed in one of the following categories based on category rating procedures: Best Qualified – significantly exceeds the evaluation criteria Well Qualified – excels in the evaluation criteria Qualified – meets the minimum qualification requirements If you are found to be among the top-qualified candidates, you will be referred to the selecting official for employment consideration. The category rating process does not add veterans’ preference points but protects the rights of veterans by placing them ahead of non-preference eligibles within each category.

Veterans’ preference eligibles who meet the minimum qualification requirements and who have a compensable service-connected disability of at least 10 percent will be listed in the highest quality category (except in the case of professional or scientific positions at the GS-09 level or higher).

Required Documents

To apply for this position, you must submit a complete Application Package which includes:

• 1.
• Resume showing relevant experience; cover letter optional.
• NOTE: As of September 27, 2025, federal agencies will only accept resumes that are two pages or less in length.
• Your resume must indicate your citizenship and whether you are registered with the Selective Service if you are a male born after December 31, 1959.
• Your resume must also list your work experience and education (if applicable), including the start and end dates (mm/yyyy) of each employment, along with the number of hours worked per week.
• For work in the Federal service, you must include the series and grade level for the position(s).
• For resume and application tips, visit: https://www.cms.gov/files/document/2026-required-documents.pdf IN DESCRIBING YOUR WORK EXPERIENCE AND/OR EDUCATION, PLEASE BE CLEAR AND SPECIFIC REGARDING YOUR EXPERIENCE OR EDUCATION.
• We strongly encourage applicants to utilize the USAJOBS resume builder in the creation of resumes.
• Determining length of general or specialized experience is dependent on the below information and failure to provide ALL information WILL result in a finding of ineligible.
• Official Position Title (include series and grade if Federal job) Duties (be specific in describing your duties) Employer’s name and address Supervisor name and phone number Start and end dates in the month and year format (e.g. June 2007 to April 2008) Full-time or part-time status (include hours worked per week) Salary 2.
• CMS Required Documents (e.g., SF-50, DD-214, SF-15, etc.).
• Required documents may be necessary to be considered for this vacancy announcement.
• Failure to provide the required documentation WILL result in an ineligible rating OR non-consideration. 3. College Transcripts.
• Although this position does not require a degree, you may substitute college credit in whole or in part for experience at specified grade levels.
• You must submit a copy of your transcript at the time of application in order to substitute your education for the required experience.
• If you do not submit a transcript, your education will not be considered in determining your qualifications for the position.
• You may submit an unofficial transcript or a list of college courses completed, indicating course title, credit hours, and grades received.
• An official transcript is required if you are selected for the position.
• College Transcripts and Foreign Education: Applicants who have completed part or all of their education outside the U.S. must have their foreign education evaluated by an accredited organization to ensure that it is comparable to the education received in accredited educational institutions in the U.S. For a listing of services that can perform this evaluation, visit the National Association of Credential Evaluation Services website.
• This list, which may not be all-inclusive, is for informational purposes only and does not imply any endorsement of any specific agency. 4.
• Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended, that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application.
• Requests for RA for the USA Hire Competency-Based Assessments and appropriate supporting documentation for RA must be received prior to commencing the USA Hire Competency-Based Assessments.
• Decisions on requests for RA are made on a case-by-case basis.
• If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency-Based Assessments, based on your adjudication decision.
• You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency-Based Assessments if you received the link after the close of the announcement.
• To determine if you need an RA, please click here to review the Procedures for Requesting a Reasonable Accommodation for Online Assessments. 5.
• RPL Eligibility Required Documents: The following documents are required to verify your RPL eligibility:1) Your most recent SF-50 (Notification of Personnel Action), or equivalent, as stated in the job announcement that shows position occupied (block #34 of your SF-50), tenure, grade and step, salary, and full performance level;2) Your SF-50 showing Separation – RIF.
• If that is not available yet, then official documentation of your Reduction in Force (RIF) separation notice or a proposed removal/separation notice; AND 3) Your latest performance rating and rating of record (if separate documents) showing your rating score as at least fully successful or equivalent.