Summary This position is located in the Department of Health & Human Services (HHS), Centers for Medicare & Medicaid Services (CMS), Office of Information Technology, OIT, Information Security and Privacy Group. As a IT Specialist (Security), GS-2210-9, you will support the implementation and dissemination of agency-wide information privacy and security policies, procedures, and standards for the information and information technology systems that support the operations and assets of CMS. Responsibilities Serve as the lead analyst for CMS privacy compliance activities, including the development, review and maintenance of System of Records Notices (SORNs), Information Exchange Agreements (IEAs) and Computer Matching Agreements (CMAs). Evaluate CMS information systems, programs, and data flows to identify privacy risks and gaps in compliance and recommends risk-based mitigation strategies consistent with NIST, OMB, and HHS guidance. Interpret, apply and support implementation of federal ...