IT Specialist (Security)

Summary

This position is located in the Department of Health & Human Services (HHS), Centers for Medicare & Medicaid Services (CMS), Office of Information Technology (OIT), Information Security and Privacy Group (ISPG), Division of Security and Privacy Compliance (DSPC). As a IT Specialist (Security), GS-2210-13, you will serve as the Governance, Risk Management, and Compliance (GRC) Technical Engineer, System Developer, and Platform Maintainer.

Duties

• Oversee contractor teams and manage the platform's full lifecycle from design through deployment and maintenance.
• Design custom workflows, intake forms, and system integrations, including Application Programming Interface (API) connections between the GRC platform and other enterprise systems.
• Build dashboards and compliance reports to support Chief Information Security Officer (CISO) reporting, federal audits, and Inspector General reviews.
• Engage system owners, contractors, and leadership on platform updates, and deliver training on GRC tools and federal compliance requirements.

Qualifications

ALL QUALIFICATION REQUIREMENTS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT. Your resume (limited to no more than 2 pages) must include detailed information as it relates to the responsibilities and specialized experience for this position. Evidence of copying and pasting directly from the vacancy announcement without clearly documenting supplemental information to describe your experience will result in an ineligible rating. This will prevent you from being considered further. There is a Basic Requirement and Minimum Qualification Requirement for this position. You must meet both requirements. Basic Requirement: You must have IT related experience, demonstrated by paid or unpaid experience obtained in either the private or public sector, and/or completion of specific, intensive training that demonstrates that I possess each of the following four competencies: (1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail. (2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. (3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. (4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND In order to qualify for the GS-13, you must meet the following: You must demonstrate in your resume at least one year (52 weeks) of qualifying specialized experience equivalent to the GS-12 grade level in the Federal government, obtained in either the private or public sector, to include: 1) Configuring, developing, or maintaining a Governance, Risk, and Compliance (GRC) platform (such as CMS Acceptable Risk Safeguards Compliance Tracking System (CFACTS), Archer Integrated Risk Management (IRM), or similar industry GRC tools) to support IT security compliance tracking; AND 2) Applying system development practices such as application configuration, workflow design, integration development, or structured data formats (e.g., JavaScript Object Notation (JSON), eXtensible Markup Language (XML), YAML Ain't Markup Language (YAML)); AND 3) Applying IT security compliance requirements (such as Federal Information Security Modernization Act (FISMA) or the Authorization to Operate process) to support documentation or compliance reporting activities. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills, and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Education

This job does not have an education qualification requirement.

How to apply

Please read the entire announcement and all the instructions before you begin an application. To apply and be considered for this position, you must complete all required questionnaires, assessments and submit all required documentation as specified in the How to Apply and Required Documents sections. The complete application package must be submitted by 11:59 PM (ET) on 09/30/2026. The application process is as follows: Click the Apply button. Answer the questions presented in the application and attach all necessary supporting documentation. Click the Submit Application button prior to 11:59 PM (ET) on 09/30/2026. If you are required to complete any USA Hire Assessments, you will be notified after submitting your application. The notification will be provided in your application submission screen and via email. The notification will include your unique assessment access link to the USA Hire system and the completion deadline. Additionally, in USAJOBS you can click "Track this application" to return to your assessment completion notice. Access USA Hire using your unique assessment link. Access is granted through your USAJOBS login credentials. Review all instructions prior to beginning your assessments. You will have the opportunity to request a testing accommodation before beginning the assessments should you have a disability covered under the Rehabilitation Act of 1973 as amended. Set aside at least 3 hours to take the USA Hire Assessments; however, most applicants complete the assessments in less time. If you need to stop the assessments and continue later, you can re-use your unique assessment link. Your responses to the USA Hire Assessments will be reused for one year (in most cases) from the date you complete an assessment. If future applications you submit require completion of the same assessments, your responses will be automatically reused. Visit the USA Hire Applicant Resource Center for practice assessments and assessment preparation resources at https://support-usahire.opm.gov/hc/en-us. To update your application, including supporting documentation: During the announcement open period, return to your USAJOBS account, find your application record, and click Edit my application. This option will no longer be available once the announcement has closed. To view the announcement status or your application status: Visit https://help.usajobs.gov/how-to/application/status. Your application status page is where you can view your application status, USA Hire assessment completion status, and review your notifications sent by the hiring agency regarding your application. Commissioned Corps Officers (including Commissioned Corps professionally boarded applicants) who are interested in applying to this position must send their 1-page cover letter and 2-page ONLY professional resume (not PHS Curriculum Vitae) to [email protected] in lieu of applying through this announcement. The resume should specifically explain how you are qualified for this position and draw specific attention to your skills and experiences that demonstrate these qualifications. Also, send any transcripts, licenses, or certifications as requested in this announcement. Please send all documents in 1 PDF file. In the subject line of your e-mail, include only the Job Announcement Number. In the body of your e-mail, include your current rank name and serial number. Failure to provide this information may impact your consideration for this position. Additional selections may be made for similar positions across the Department of Health and Human Services (HHS) within the local commuting area(s) of the location identified in this announcement. By applying, you agree to have your application shared with interested selecting official(s) at HHS. Clearance of CTAP/ICTAP will be applied for similar positions across HHS.