Cybersecurity & Compliance Lead - Audits, Incidents

Metropolitan Government of Nashville and Davidson County; Nashville (TN); Presencial; USD 90.000 - 125.000; Jornada completa

Descripción de la vacante

Metropolitan Nashville and Davidson County is seeking a Security and Compliance Administrator to develop and enforce security policies, conduct vulnerability assessments, and implement measures to safeguard systems supporting court operations.

The candidate will monitor for incidents, manage access controls, and prepare compliance reports, with a focus on regulatory frameworks and ongoing staff training. A strong foundation in cybersecurity and proactive mindset is essential.

Formación

• Bachelor’s degree in Computer Science, Information Security, or related field with at least 3 years of IT security experience.
• Experience with HIPAA/CJIS/FERPA/PCI-DSS or similar compliance frameworks.
• Security certifications like Security+, CISA, CISSP, or CISM preferred or required.

Responsabilidades

• Develop and enforce security policies and procedures.
• Perform vulnerability assessments and monitor systems for risks.
• Manage role-based access controls and user provisioning.
• Prepare compliance reports and maintain audit logs for reviews.
• Lead incident response and coordinate remediation actions.
• Provide security training to staff and raise awareness.

Conocimientos

Regulatory compliance

Cybersecurity best practices

Incident response

Risk management

Vulnerability assessments

Documentation

Educación

Bachelor's degree in Computer Science, Information Security, or related field

Herramientas

SIEM

IDS/IPS

Firewalls

Microsoft 365 security

Linux security

Windows security

Descripción del empleo

Metropolitan Nashville and Davidson County is seeking a Security and Compliance Administrator to develop and enforce security policies, conduct vulnerability assessments, and implement measures to safeguard systems supporting court operations.

The candidate will monitor for incidents, manage access controls, and prepare compliance reports, with a focus on regulatory frameworks and ongoing staff training. A strong foundation in cybersecurity and proactive mindset is essential.