Sr. Information Security Specialist

This role works alongside the Security Lead as a co-leader of the security team, providing coverage during the Security Lead’s absence and serving as a key, CMS-facing security resource in their own right., * Security Team Co-Leadership: Share leadership responsibility for the Information Security Specialist team with the Security Lead, including coverage during the Security Lead’s absence or scheduling conflicts.

• Technical Security Work: Perform hands-on security tasks including vulnerability assessment, remediation coordination, and security documentation.
• CMS Stakeholder Relationship: Serve as a trusted, CMS-facing security resource; maintain a strong working relationship with CMS Security Oversight Leadership.
• Mentorship: Support and mentor other Information Security Specialists on the team.
• Reporting: Participate in and support the recurring Security/Tools team reporting cadence.
• Perform additional duties assigned.

What We Need:

• 6+ years of information security experience, ideally in a federal or CMS environment.
• Demonstrated ability to operate independently as a team co-lead.
• Working knowledge of vulnerability scanning and compliance/POA&M platforms, Jira, and Confluence.
• Ability to obtain and maintain CMS EUA access and required clearance.

Even Better:

• Security certification (Security+, CySA+, or equivalent).
• Prior CMS or HHS security program experience.
• Experience mentoring junior security staff.

Clearance Requirement:

• Ability to obtain and maintain public trust background investigation/clearance per client requirements.

At ASG, we want you to be well and thrive. Our benefits package includes:

• Healthcare Benefits
• Life
• Disability
• Paid Time Off
• 401k Matching
• Employee Referral Bonus
• Education Assistance
• Learning and Development resources

ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications.