Security Manager

At Leidos, the Digital Modernization Sector brings together our digital transformation and IT programs, allowing us to better serve our customers through scale and repeatability. We are currently seeking a Security Manager to work with the Centers for Medicare & Medicaid Services.

The Centers for Medicare & Medicaid Services (CMS) manages the Chronic Conditions Warehouse (CCW) and Virtual Research Data Center (VRDC) under the Office of Enterprise Data and Analytics (OEDA). These programs provide secure data access and support internal and external researchers in analyzing healthcare data to improve care quality and reduce costs.

The Security Manager will oversee all aspects of security and privacy within the CCW and VRDC environments, ensuring compliance with federal regulations and maintaining the integrity of CMS's data assets.

Primary Tasks

• Security Oversight: Develop, implement, and maintain security policies and procedures to protect CMS data and systems, ensuring compliance with Federal Information Security Modernization Act (FISMA) specifications and other relevant standards.

• Incident Management: Reply to security incidents, conduct root cause analyses, and implement corrective actions. Develop communication plans for stakeholders and users affected by security incidents.

• Risk Management: Identify, assess, and manage risks associated with data and infrastructure security. Implement risk mitigation strategies and maintain a robust risk management framework.

• Continuous Monitoring: Utilize security monitoring tools to maintain ongoing awareness of vulnerabilities and threats. Ensure real-time detection and response capabilities are in place.

• Collaboration: Work closely with other CMS components, external contractors, and stakeholders to coordinate security efforts, including secure data sharing and compliance with CMS policies.

• Infrastructure Security: Oversee the security of cloud infrastructure, including AWS and Microsoft Azure environments, ensuring secure data storage and access. Manage encryption, access controls, and secure communication channels.

• Documentation and Reporting: Maintain comprehensive security documentation, including security management plans, incident response plans, and compliance reports. Regularly update and convey security status to CMS leadership.

Basic Qualifications

• Bachelor’s degree in information security, Cybersecurity, Computer Science, or a related field.

• Minimum of 7 years of experience in IT security management, with a focus on large-scale data systems and cloud environments.

• Demonstrated experience with FISMA compliance, risk management frameworks, and incident response.

• Strong knowledge of security standards and best practices, including NIST, ISO 27001, and others.

• Proficiency with security monitoring tools and technologies.

• Ability to obtain and maintain a Public Trust.

Preferred Qualifications

• Master’s degree in Cybersecurity, Information Security, or a related field.

• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).

• Experience in healthcare data security and familiarity with CMS systems and policies.

• Familiarity with CMS Acceptable Risk Safeguards (ARS) standards.

• Knowledge of AWS cloud security practices and technologies.

• Experience with Scaled Agile Framework (SAFe) Agile methodologies.

• Excellent communication skills, with the ability to partner effectively with technical and non-technical stakeholders.

This position plays a critical role in maintaining the security and integrity of CMS's data systems, ensuring compliance with federal regulations, and promoting the agency's mission to improve healthcare quality and affordability.

Original Posting Date:

2024-08-02

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $101,400.00 - $183,300.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applica