Job Description

Posting number: 2026-03602

Department: NVHA - CONSUMER HEALTH SERVICES

Job classification: Unclassified

Posting type: Open Competitive

Categories: IT and Computers

The Silver State Health Insurance Exchange (Exchange) oversees and operates the online health insurance marketplace in Nevada, known as Nevada Health Link. The Exchange is a unit within the Division of Consumer Health Services and a part of the larger department, Nevada Health Authority.

The Exchange facilitates and connects eligible Nevadans who are not insured by their employer or Medicare to health insurance options. Individuals can purchase Affordable Care Act (ACA) certified Qualified Health & Dental Plans through the Exchange and if eligible, receive subsidy assistance to help offset monthly premiums and out-of-pocket costs.

The Information Systems Manager is in a leadership and managerial position. The position is full-time and located in Carson City. Periodic travel in-state and out-of-state may be required.

Under the general direction of the Chief Operations Officer, the Information Systems Manager will oversee management of the systems that the Exchange uses in day-to-day operations. These systems include the Customer Assistance Portal (CAP) and Carrier Connect. This position is required to ensure that the Exchange’s systems follow all federal and state requirements, including compliance with the Centers for Medicare & Medicaid Services (CMS) as well as Federal Tax Information (FTI). The Information Systems Manager will provide technical vendor coordination as well as coordination with state and federal agencies.

The Information Systems Manager will coordinate with the Nevada Health Authority Director’s Office Information Security Officer (ISO) to ensure that the Exchange follows all information security policies and regulations to protect the agency’s systems and the protected information within the systems. This position will work with the ISO to development, implement, and maintain security policies.

The Information Systems Manager manages a team of three. With the team, this position will oversee User Acceptance Testing (UAT) governance and coordination as well as technical oversight of reconciliation activities. Additionally, this position will coordinate system integration, data integrity and system issue resolution.

Examples of duties

Bachelor's degree from an accredited college or university in Information Security, Cybersecurity, Information Systems, Business Administration, Public Administration, Risk Management, or a closely related field; and/or seven (7) years of progressively responsible professional experience in information security, cybersecurity governance, enterprise risk management, vendor and third-party risk oversight, IT project management, compliance management, or related disciplines; OR an equivalent combination of education and experience.

Qualifications

Responsibilities include, but are not limited to:

• Information Security Program: Overall responsibility for the development, implementation, monitoring and maintenance of the agency’s security system to protect against unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction.
• General IT Management: Participate in management policy and decision-making pertaining to various projects. Prepare activity and progress reports for application support functions, meeting established deadlines.
• Participate in State IT activities and policy-making activities.
• Oversight of requirements from federal partners related to ARC-AMPE as well as any other federal and state security requirements.
• Supervise subordinate staff, including hiring, determining workload, delegating assignments, and training, monitoring, and evaluating performance, and taking disciplinary action.
• Oversight of carrier onboarding, account transfer, reconciliation, and system responses.
• Resolve system problems presented by subordinate staff, users, and clients regarding work processes, policies, procedures, and methods.
• Utilize contract and vendor management skills in the fulfillment of organizational goals.

Supplemental information

Experience should include one or more of the following:

• Information security governance, policy development, and security program management.
• Enterprise and operational risk assessment, mitigation planning, and risk monitoring.
• Vendor, contractor, and third-party security risk management, including security reviews, due diligence, and contract compliance.
• Security consulting and oversight for large-scale IT projects, system implementations, and modernization initiatives.
• Regulatory and compliance management, including privacy, security, and audit requirements applicable to healthcare, government, or federally funded programs.
• Incident response coordination, business continuity, and disaster recovery planning.
• Development and monitoring of security controls, security standards, and risk-based decision-making processes.
• Collaboration with business, technical, and executive stakeholders to ensure security requirements are integrated throughout the project lifecycle.
• Managing security-related audits, assessments, remediation activities, and continuous improvement initiatives.

Preferred Experience:

• Experience supporting State-Based Marketplaces (SBMs), healthcare exchanges, Medicaid systems, or other government-sponsored healthcare programs.
• Knowledge of NIST Cybersecurity Framework (CSF), NIST 800-53, IRS Publication 1075, CMS Acceptable Risk Controls for ACA, Medicaid, and Provider Entities (ARC-AMPE), HIPAA, and related federal and state security requirements.
• Experience overseeing security requirements for cloud-based solutions, system integrations, and large-scale application modernization projects.
• Project management experience involving multiple vendors, system integrators, and cross-functional stakeholder groups.