City IT Security Leader: Governance, Risk & Incident Response

City of Wilmington; Wilmington (NC); On-site; USD 90,000 - 150,000; Full time

Job summary

City of Wilmington is seeking an IT Security Officer to strengthen the City’s cybersecurity foundation and lead governance, compliance, risk management, and security initiatives. The role focuses on safeguarding information, services, and people while aligning with standards and regulatory requirements.

You will guide security programs, train staff, and report regularly to executives and City Council, ensuring secure IT design and proactive defenses across departments.

Qualifications

• Bachelor’s degree in IT or cybersecurity; 5 years of progressive IT/cybersecurity experience.
• Experience in government, critical infrastructure, or regulated environments preferred.
• CISSP, CISM, CISA, CRISC or related credentials preferred.
• Knowledge of NIST, CIS Controls and risk management methodologies.

Responsibilities

• Lead cybersecurity governance and regulatory compliance across the organization.
• Develop and maintain security policies, procedures and frameworks.
• Conduct risk assessments and monitor vulnerabilities to identify threats.
• Coordinate audits and compliance activities to strengthen security practices.
• Present security posture and risks to leadership and City Council.

Skills

Leadership

Governance

Risk management

Policy development

Incident response

Communication

Regulatory compliance

Training programs

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

Master’s degree preferred

Job description

City of Wilmington is seeking an IT Security Officer to strengthen the City’s cybersecurity foundation and lead governance, compliance, risk management, and security initiatives. The role focuses on safeguarding information, services, and people while aligning with standards and regulatory requirements.

You will guide security programs, train staff, and report regularly to executives and City Council, ensuring secure IT design and proactive defenses across departments.