Description

Own cybersecurity governance, risk management, and compliance operations across agency applications, infrastructure, and cloud services.

This role is on-site.

Responsibilities

• Conduct security risk assessments, vendor reviews, and technical evaluations of new and existing systems.
• Support compliance with CMS, HIPAA, NIST, ARC-AMP-E/MARS-E, and IRS Publication 1075 requirements.
• Manage audit preparation, evidence collection, remediation tracking, and corrective action planning.
• Participate in security monitoring, incident response coordination, and vulnerability management.
• Integrate security requirements into SDLC and provide consultation for cloud and enterprise applications.

Required Skills

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• Minimum 5 years of professional experience in cybersecurity, GRC, or information security.
• Minimum 3 years conducting security risk assessments, vendor security reviews, or compliance evaluations.
• Experience supporting NIST, CMS, HIPAA, or comparable federal/state security frameworks.
• Hands-on experience with vulnerability management, audit readiness, and continuous monitoring.
• Strong ability to review cloud technologies, enterprise architecture, and third-party integrations.

Preferred Skills

• CISSP, CISM, CISA, Security+, or CGRC certification.
• Experience with Azure, AWS, or Google Cloud security.
• Knowledge of Medicaid systems or state government security practices.

Key Skills

Education

Bachelor's degree