This job requires analysis of complex IT environments from a security and compliance perspective. Also required is performance as lead for the redesign of security control architecture to meet business needs and government regulations such as DoD, NIST, HIPAA, PCI, and CMS requirements. This position has regular contact with, and the ability to influence, decisions makers both at senior level management and mid-level management. This includes the CIO, Enterprise Security Officer, Security Manager, and Medicare Systems Owner. In addition, this job maintains contact with several areas across the company including Internal Audit, Compliance, Business Services, Legal, and Human Resources. External contacts include mid-level officials at both CMS and DoD. This position demands excellent writing and communication skills; the ability to translate technical Security concepts into layperson's terms and interface with business & IT clients to provide security compliance education.

- Identify security issues and risks, and develop mitigation plans- Architect, design, implement, support, and evaluate security-focused tools and servicesincluding project leadership roles- Develop and interpret security policies and procedures- Evaluate and recommend new and emerging security products and technologies- Participate in tier 2 and tier 3 security operations support- Participate in incident handling

Administer, develop and expand the Governance, Risk, and Compliance process using RSA Archer eGRC software.

Conduct evaluations of the IT environment based on established standards: NIST, CMSRs, HIPAA, best practices, etc.