> Markdown version of [/jobs/ext/505664-information-owner-mcs-operations-management](https://www.wearedevelopers.com/jobs/ext/505664-information-owner-mcs-operations-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Owner - MCS Operations Management

- **Company:** Health, Inc
- **Location:** Austin, TX, United States (Remote available)
- **Salary:** $69,572.0 - $91,835.0
- **Contract:** Permanent contract
- **Skills:** Software Documentation, Cyber Security, Data Control, Information Technology Audit, Systems Development Life Cycle, Software Engineering, Software Requirements Analysis, Data Classification, Information Technology
- **Published:** June 11, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=ea2234649bd1fbf6

## About the Role

Do you have experience in Team leadership?, Do you have a High school diploma or GED?, * Medicaid and CHIP business;

 * IT security controls;
 * software development life cycle and systems development life cycle concepts;
 * business and management principles involved in strategic planning, leadership, and coordination of people and resources; and
 * project management principles and practices.

Skill in:

 * business analysis methodologies;

 * analyzing and evaluating complex information technology applications, policies, and issues;

 * developing creative and workable solutions to complex problems and issues;
 * working collaboratively and cooperatively with diverse groups; and
 * written and oral communication., * High school diploma and at least five (5) years of full-time work experience in a health and human services field or information technology field.
 * Associate degree from an accredited institution and at least three (3) years of work experience in a health and human services field or information technology field.
 * Bachelor's degree from an accredited four-year college or university and at least one (1) year experience in a health and human services field or information technology field; and

Required experience in:

 * Medicaid & CHIP IT systems;
 * IT System Security Controls;
 * developing reports;
 * analyzing complex information;
 * managing projects; and
 * evaluating business processes.

Preferred experience in:

 * IT system information ownership
 * IT audit coordination;
 * HHSC policy development; and
 * developing policies and processes to promote efficiency and accountability.

## Description

The HHSC Medicaid and CHIP Services (MCS) division seeks a highly qualified candidate to fill the position of Business Analyst III in the Central Support unit within Operations Management. The Operations Management division provides oversight of technology systems and operational processes that support the operation of the Medicaid program such as provider enrollment, claims processing, service authorization support, contract oversight, and electronic visit verification.
The Business Analyst III reports to the Central Support manager and performs complex (senior-level) business analysis supporting the Operations Management division's information technology (IT) systems. Acts as the lead Information Owner (IO) in MCS Operations Management for Medicaid long-term care and acute care systems. The position will support various activities, projects and initiatives related to system security and vulnerability reporting, system information ownership, project planning, and vendor oversight.
This position works under limited supervision, with considerable latitude for the use of initiative and independent judgement to effectively lead others, and reviews complex IT system deliverables such as risk assessment plans, project action items and milestones, privacy impact and threshold assessments, and system security controls.
The ideal candidate for this position is a highly organized, highly motivated, natural leader, who effectively navigates a large, complex, organization, develops trusted and supportive relationships, and thrives on overcoming obstacles and solving problems., Attends work on a regular and predictable schedule in accordance with agency leave policy and performs other duties as assigned.

 * (40%) Information Owner - MCS Operations Management: The Business Analyst III will act as the lead IO for multiple acute care and long-term care systems owned by MCS Operations Management. The work involves complex IT project management to:
 + Classify information: based on agency policy and data classification standards, classify data under the owner's scope of authority.
 + Approve access to information: within agency policy, the IO is responsible for approving access to information; determine by whom and under what conditions data under the IO's authority can be accessed and used. The IO acts as the second-level approver for system access requested and approved by user's direct supervisor.
 + Review Access Lists: the IO periodically reviews access lists to ensure only appropriate people can access information and verify that former employees have been removed.
 + Assign custody of information: the IO is responsible for providing authority to information custodians (ICs) to implement security controls as appropriate according to agency policy.
 + Specify data controls and convey them to Users and Custodians: determine the controls to be used to protect data and communicate these controls to ICs and users.
 + Accountable for exceptions to security controls: The IO is accountable to determine, document, justify and approve reasonable exceptions when a control required by policy is not appropriate for a specific IT system.
 + Confirm that controls are in place: The IO must periodically confirm with the ICs that necessary controls are in place.
 + Perform information security risk assessments: the IO identifies, recommends, and documents acceptable risk levels for resources under ownership control.
 + Consult with Information Security Office: Consult with staff from the Chief Information Security Office (CISO) and provide authority to ICs to implement security controls and procedures, review system security plans and risk remediation plans. Demonstrate securities within the system of record.
 * (20%) Information Security Governance and IT System Support: Provides governance and coordination support for Operations Management Information Owners. Coordinates RMF/ATO activities, including system categorization, Privacy Analysis, Risk and Security assessments. Works with other Information Owners, Information Custodians, CISO, vendors, and subject matter experts to document system information, support control reviews, track assessment timelines, and monitor remediation activities. Assists with access review coordination, data classification, custody assignments, security control documentation, and confirmation of control implementation.
 * (15%) Process Documentation and Reporting: Responsible for developing, documenting, and reporting on internal processes and procedures related to IT Systems Security, governance and support requirements. Responsible for reporting to Operations Management leadership on the status of IT system security activities and requirements.
 * (10%) Vendor Oversight: Provides project management oversight and coordination for vendor supported systems and contract related activities owned by Operations Management business areas. Coordinates with vendors, contract managers, Information Custodians, and program staff to ensure vendor support aligns with operational, audit, security, and compliance requirements. Tracks vendor deliverables related to system security, facilitates issue resolution, and escalates risks and delays that may impact business operations, audit responses, or RMF/ATO timelines.
 * (10%) Audit coordination: Acts as back up for and assists the audit coordination lead project manager. Performs project management for Operations Management teams pertaining to audits issues. Includes coordination of research, analysis, planning, development, and implementation activities for audit findings, and drafting of management response to audit findings.
 * (5%) Other duties as assigned: other duties as assigned to support Operations Management business areas., * exercise sound judgment in making critical decisions.
 * analyze and interpret technical information, including regulations, policies, and system documentation;
 * communicate technical instructions to system users;
 * analyze, evaluate, and integrate business rules into system requirements;
 * develop plans to address identified issues.
 * make efficient use of limited resources.
 * establish clear goals and objectives.
 * work within a fast-paced, deadline driven information technology environment.
 * organize and present information effectively.
 * work independently and deliver results in an environment of broad, consultative management.
 * adapt to change or modify behavior in response to changes in situations or priorities., * Your application must be complete and contain all the requested information. Job histories must demonstrate how you meet the initial selection criteria at a minimum.
 * Any employment offer is contingent upon available budgeted funds. The offered salary will be determined in accordance with budgetary limits and the requirements of HHSC Human Resources Manual.

Operations Management Mission: to implement and maintain effective and efficient Medicaid program operations so Texans can receive the services they need.

Operations Management Vision: To improve Texas Medicaid operations and the stakeholder experience.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Your Code as a Crime Scene](https://www.wearedevelopers.com/videos/1342-your-code-as-a-crime-scene)
- [RPA in the Public Sector](https://www.wearedevelopers.com/videos/86-rpa-in-the-public-sector)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)
- [Starter Kit For Job Applications For Developers](https://www.wearedevelopers.com/magazine/7-starter-kit-for-job-applications-for-developers)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)