The vendor is required to provide a custodian of sensitive information, in which the centers for medicare & medicaid service (CMS) requires states to adhere to the streamlined modular certification (SMC) guidance for all current and future module implementations.
- CMS requires states to monitor and conduct regular security and privacy control testing through independent security and privacy assessments.
- A third-party independent assessor who has project management experience to ensure all security and privacy assessments are delivered on time, within budget, and with minimal disruption to the agency operation.
• Provide project leadership and decision-making.
• Direct and oversee the development of the governance framework and vendor solutions.
• Serve as liaison to state agency principals and advisory committees, to defend/explain work output.
• Develop, document, and oversee integrated project plan/schedule.
• Collate and reconcile stakeholder activities, dependencies, and schedules.
• Facilitate regular team meetings with the solution vendor teams, and others as needed, to ensure that all are working together effectively to meet all project milestones and goals.
• Conduct evaluations of the project’s overall progress toward milestones and outcomes.
• Identify gaps and risks and provide recommendations.
• Assess the progress of certification activities/progress.
• Design, develop, implement, and support vendor solutions as needed to support division.
• Provide subject matter expertise on evolving vendor solutions, its processes, and approach over time – advice on industry improvements, standards, etc.
• Fulfill solution vendor contractual requirements.
- Contract Period/Term: 3 years
- Questions/Inquires Deadline: April 16, 2025